添加jenkins配置脚本

2026-04-23 02:19:23 +08:00
parent e071f03b3d
commit ad0ded5e58
6 changed files with 506 additions and 0 deletions
--- a/jenkins/Jenkinsfile.deploy
+++ b/jenkins/Jenkinsfile.deploy
@@ -0,0 +1,85 @@
+pipeline {
+  agent none
+
+  options {
+    disableConcurrentBuilds()
+    timestamps()
+  }
+
+  parameters {
+    string(name: 'SOURCE_NODE_NAME', defaultValue: '', description: '上游构建节点名')
+    string(name: 'SOURCE_WORKSPACE_ROOT', defaultValue: '', description: '上游源码根目录')
+    string(name: 'BUILD_VERSION', defaultValue: '', description: '待部署版本号')
+    string(name: 'DEPLOY_DIRECTORY', defaultValue: '/home/ubuntu/Genarrative-deploy', description: '固定部署目录')
+    string(name: 'EXPECTED_UPSTREAM_JOB', defaultValue: '', description: '允许触发本作业的上游作业名')
+  }
+
+  stages {
+    stage('校验触发来源') {
+      agent {
+        label 'built-in'
+      }
+
+      steps {
+        script {
+          def upstreamCause = currentBuild.rawBuild.getCause(hudson.model.Cause$UpstreamCause)
+          if (upstreamCause == null) {
+            error('部署流水线禁止人工直接执行，只允许由上游构建并部署流水线触发。')
+          }
+
+          def actualUpstreamJob = upstreamCause.upstreamProject ?: ''
+          def expectedUpstreamJob = params.EXPECTED_UPSTREAM_JOB?.trim()
+          def allowedUpstreamJob = env.GENARRATIVE_ALLOWED_UPSTREAM_JOB?.trim()
+
+          if (!params.BUILD_VERSION?.trim()) {
+            error('BUILD_VERSION 不能为空。')
+          }
+
+          if (!params.SOURCE_WORKSPACE_ROOT?.trim()) {
+            error('SOURCE_WORKSPACE_ROOT 不能为空。')
+          }
+
+          if (!params.SOURCE_NODE_NAME?.trim()) {
+            error('SOURCE_NODE_NAME 不能为空。')
+          }
+
+          if (expectedUpstreamJob && actualUpstreamJob != expectedUpstreamJob) {
+            error("上游作业校验失败，期望 ${expectedUpstreamJob}，实际 ${actualUpstreamJob}")
+          }
+
+          if (allowedUpstreamJob && actualUpstreamJob != allowedUpstreamJob) {
+            error("环境门禁校验失败，仅允许 ${allowedUpstreamJob} 触发，实际 ${actualUpstreamJob}")
+          }
+
+          env.UPSTREAM_JOB_NAME = actualUpstreamJob
+        }
+      }
+    }
+
+    stage('部署指定版本') {
+      agent {
+        label "${params.SOURCE_NODE_NAME}"
+      }
+
+      steps {
+        dir("${params.SOURCE_WORKSPACE_ROOT}") {
+          sh """
+            set -euo pipefail
+            test -d "build/${params.BUILD_VERSION}"
+            chmod +x scripts/jenkins-deploy-release.sh
+            # 只部署上游已构建好的版本目录，避免部署阶段再次构建产生漂移。
+            ./scripts/jenkins-deploy-release.sh \
+              --source-dir "build/${params.BUILD_VERSION}" \
+              --deploy-dir "${params.DEPLOY_DIRECTORY}"
+          """
+        }
+      }
+    }
+  }
+
+  post {
+    success {
+      echo "部署完成，版本号: ${params.BUILD_VERSION}，上游作业: ${env.UPSTREAM_JOB_NAME}"
+    }
+  }
+}