286 lines
16 KiB
Groovy
286 lines
16 KiB
Groovy
def serviceModules = [
|
||
'gateway', 'gateway-overseas', 'auth', 'iam', 'firstleg', 'finance', 'order', 'warehouse', 'file', 'print',
|
||
'integration-service', 'lastleg-service', 'warehouse-overseas-service', 'event-bridge-service', 'audit-service'
|
||
]
|
||
|
||
def serviceCheckboxes = [
|
||
'gateway': 'SERVICE_GATEWAY',
|
||
'gateway-overseas': 'SERVICE_GATEWAY_OVERSEAS',
|
||
'auth': 'SERVICE_AUTH',
|
||
'iam': 'SERVICE_IAM',
|
||
'firstleg': 'SERVICE_FIRSTLEG',
|
||
'finance': 'SERVICE_FINANCE',
|
||
'order': 'SERVICE_ORDER',
|
||
'warehouse': 'SERVICE_WAREHOUSE',
|
||
'file': 'SERVICE_FILE',
|
||
'print': 'SERVICE_PRINT',
|
||
'integration-service': 'SERVICE_INTEGRATION',
|
||
'lastleg-service': 'SERVICE_LASTLEG',
|
||
'warehouse-overseas-service': 'SERVICE_WAREHOUSE_OVERSEAS',
|
||
'event-bridge-service': 'SERVICE_EVENT_BRIDGE',
|
||
'audit-service': 'SERVICE_AUDIT'
|
||
]
|
||
|
||
def commonPaths = [
|
||
'pom.xml', 'platform-bom/', 'common-core/', 'common-web/', 'common-security/',
|
||
'common-openapi/', 'common-audit/', 'common-event-contract/', 'Jenkinsfile',
|
||
'Jenkinsfile.service', 'deploy/'
|
||
]
|
||
|
||
def databaseMigrationPaths = ['deploy/sql/']
|
||
|
||
def downstreamResults = [:]
|
||
|
||
def environmentChoicesForJob(String jobBaseName) {
|
||
return jobBaseName == 'backend-java-dev'
|
||
? ['development', 'test', 'staging', 'production']
|
||
: ['test', 'development', 'staging', 'production']
|
||
}
|
||
|
||
def downstreamJobPrefixForJob(String jobBaseName) {
|
||
return jobBaseName == 'backend-java-dev'
|
||
? 'baiyue-firstleg-dev-'
|
||
: 'baiyue-firstleg-'
|
||
}
|
||
|
||
pipeline {
|
||
// 总控流水线只识别变更并调度独立的服务 Job；实际 Maven、镜像和部署在 Jenkinsfile.service 中完成。
|
||
agent none
|
||
|
||
options {
|
||
disableConcurrentBuilds()
|
||
timestamps()
|
||
buildDiscarder(logRotator(numToKeepStr: '30'))
|
||
}
|
||
|
||
parameters {
|
||
choice(name: 'BUILD_MODE', choices: ['AUTO', 'SELECT', 'ALL'], description: 'AUTO 按 Git 变更识别；SELECT 勾选服务；ALL 构建全部服务')
|
||
booleanParam(name: 'SERVICE_GATEWAY', defaultValue: false, description: 'Gateway 网关服务（gateway）')
|
||
booleanParam(name: 'SERVICE_GATEWAY_OVERSEAS', defaultValue: false, description: '海外 Gateway 网关服务（gateway-overseas）')
|
||
booleanParam(name: 'SERVICE_AUTH', defaultValue: false, description: '统一认证服务（auth）')
|
||
booleanParam(name: 'SERVICE_IAM', defaultValue: false, description: '租户与权限服务（iam）')
|
||
booleanParam(name: 'SERVICE_FIRSTLEG', defaultValue: false, description: '头程履约服务（firstleg）')
|
||
booleanParam(name: 'SERVICE_FINANCE', defaultValue: false, description: '财务服务（finance）')
|
||
booleanParam(name: 'SERVICE_ORDER', defaultValue: false, description: '订单服务（order）')
|
||
booleanParam(name: 'SERVICE_WAREHOUSE', defaultValue: false, description: '仓库与往来单位服务（warehouse）')
|
||
booleanParam(name: 'SERVICE_FILE', defaultValue: false, description: '文件中心（file）')
|
||
booleanParam(name: 'SERVICE_PRINT', defaultValue: false, description: '打印服务（print）')
|
||
booleanParam(name: 'SERVICE_INTEGRATION', defaultValue: false, description: '第三方集成服务（integration-service）')
|
||
booleanParam(name: 'SERVICE_LASTLEG', defaultValue: false, description: '海外尾程与入仓服务（lastleg-service）')
|
||
booleanParam(name: 'SERVICE_WAREHOUSE_OVERSEAS', defaultValue: false, description: '海外仓资源服务（warehouse-overseas-service）')
|
||
booleanParam(name: 'SERVICE_EVENT_BRIDGE', defaultValue: false, description: '跨区域事件桥（event-bridge-service；默认同时部署国内和海外实例）')
|
||
choice(name: 'EVENT_BRIDGE_REGION', choices: ['BOTH', 'CN', 'OVERSEAS'], description: 'BOTH 同时部署国内和海外实例；CN/OVERSEAS 用于单区故障重跑')
|
||
booleanParam(name: 'SERVICE_AUDIT', defaultValue: false, description: '审计服务（audit-service）')
|
||
choice(name: 'ENVIRONMENT', choices: environmentChoicesForJob(env.JOB_BASE_NAME), description: '部署环境')
|
||
booleanParam(name: 'DEPLOY', defaultValue: false, description: '各服务构建成功后是否独立部署')
|
||
booleanParam(name: 'SKIP_TESTS', defaultValue: false, description: '是否跳过测试；生产构建不建议勾选')
|
||
string(name: 'IMAGE_REPOSITORY', defaultValue: '172.31.198.7:10082/java-project/baiyue-firstleg', description: '内网共享镜像仓库地址')
|
||
string(name: 'DOCKER_BASE_IMAGE', defaultValue: '172.31.198.7:10082/java-project/eclipse-temurin:17-jre-alpine', description: '内网 Java 17 基础镜像')
|
||
string(name: 'DOWNSTREAM_JOB_PREFIX', defaultValue: downstreamJobPrefixForJob(env.JOB_BASE_NAME), description: '单服务 Jenkins Job 名称前缀；开发总控自动使用 dev 专属 Job')
|
||
}
|
||
|
||
stages {
|
||
stage('确定构建范围') {
|
||
agent { label 'java-builder' }
|
||
steps {
|
||
script {
|
||
// 开发环境总控 Job 固定部署到 development，避免首次构建沿用 ENVIRONMENT 的默认 test 值。
|
||
// 其他 Job（包括现有 backend-java 测试环境）仍完全沿用原有参数。
|
||
String resolvedEnvironment = env.JOB_BASE_NAME == 'backend-java-dev'
|
||
? 'development'
|
||
: params.ENVIRONMENT
|
||
env.RESOLVED_ENVIRONMENT = resolvedEnvironment
|
||
echo "Job ${env.JOB_BASE_NAME} 使用部署环境: ${env.RESOLVED_ENVIRONMENT}"
|
||
|
||
String requestedRepository = params.IMAGE_REPOSITORY?.trim()
|
||
if (!requestedRepository || requestedRepository == 'registry.example.com/your-group/baiyue-firstleg') {
|
||
error('必须填写真实镜像仓库地址')
|
||
}
|
||
if (requestedRepository.contains('://') || !requestedRepository.contains('/')) {
|
||
error('IMAGE_REPOSITORY 格式错误：请填写 host[:port]/owner/image，不要包含 http:// 或 https://')
|
||
}
|
||
echo "${env.RESOLVED_ENVIRONMENT} 环境使用共享镜像仓库: ${requestedRepository}"
|
||
env.RESOLVED_IMAGE_REPOSITORY = requestedRepository
|
||
|
||
String jobPrefix = params.DOWNSTREAM_JOB_PREFIX?.trim()
|
||
if (!jobPrefix) {
|
||
error('DOWNSTREAM_JOB_PREFIX 不能为空')
|
||
}
|
||
env.RESOLVED_JOB_PREFIX = jobPrefix
|
||
env.DATABASE_CHANGE_DETECTED = 'false'
|
||
if (env.RESOLVED_ENVIRONMENT == 'production' && params.SKIP_TESTS) {
|
||
error('生产环境禁止跳过测试')
|
||
}
|
||
|
||
List selected = []
|
||
if (params.BUILD_MODE == 'ALL') {
|
||
selected = serviceModules
|
||
} else if (params.BUILD_MODE == 'SELECT') {
|
||
selected = serviceModules.findAll { service ->
|
||
params[serviceCheckboxes[service]] == true
|
||
}
|
||
if (!selected) {
|
||
error('SELECT 模式至少需要勾选一个服务')
|
||
}
|
||
} else {
|
||
String base = env.GIT_PREVIOUS_SUCCESSFUL_COMMIT?.trim()
|
||
if (!base || sh(script: "git cat-file -e ${base}^{commit} 2>/dev/null", returnStatus: true) != 0) {
|
||
selected = serviceModules
|
||
} else {
|
||
List changed = sh(script: "git diff --name-only ${base} HEAD", returnStdout: true)
|
||
.trim().split('\\n').collect { it.trim() }.findAll { it }
|
||
boolean databaseChanged = changed.any { path ->
|
||
databaseMigrationPaths.any { prefix -> path.startsWith(prefix) }
|
||
}
|
||
env.DATABASE_CHANGE_DETECTED = databaseChanged ? 'true' : 'false'
|
||
boolean commonChanged = changed.any { path ->
|
||
boolean databaseMigration = databaseMigrationPaths.any { prefix -> path.startsWith(prefix) }
|
||
!databaseMigration && commonPaths.any { prefix -> path == prefix || path.startsWith(prefix) }
|
||
}
|
||
selected = commonChanged ? serviceModules : serviceModules.findAll { module ->
|
||
changed.any { it == module || it.startsWith("${module}/") }
|
||
}
|
||
}
|
||
}
|
||
|
||
List invalid = selected.findAll { !serviceModules.contains(it) }
|
||
if (invalid) {
|
||
error("未知服务: ${invalid.join(', ')}；允许值: ${serviceModules.join(', ')}")
|
||
}
|
||
|
||
selected = selected.unique()
|
||
if (params.DEPLOY && selected.contains('event-bridge-service')) {
|
||
String bridgeRegion = params.EVENT_BRIDGE_REGION?.trim()
|
||
if (!['BOTH', 'SELECT', 'CN', 'OVERSEAS'].contains(bridgeRegion)) {
|
||
error('EVENT_BRIDGE_REGION 只能为 BOTH、CN 或 OVERSEAS')
|
||
}
|
||
if (['BOTH', 'SELECT'].contains(bridgeRegion)
|
||
&& !['development', 'test'].contains(env.RESOLVED_ENVIRONMENT)) {
|
||
error('事件桥 BOTH 仅支持开发或测试环境；预发布和生产必须明确选择 CN 或 OVERSEAS')
|
||
}
|
||
if (bridgeRegion == 'SELECT') {
|
||
echo '兼容旧 Jenkins 参数 SELECT：本次按 BOTH 同时部署国内和海外事件桥'
|
||
}
|
||
}
|
||
env.SELECTED_SERVICES = selected.join(',')
|
||
env.NO_SERVICE_CHANGE = selected ? 'false' : 'true'
|
||
if (!selected) {
|
||
currentBuild.description = env.DATABASE_CHANGE_DETECTED == 'true'
|
||
? '仅数据库迁移变更 | 需单独审核执行'
|
||
: '没有需要构建的业务服务'
|
||
} else {
|
||
env.SOURCE_COMMIT = sh(script: 'git rev-parse HEAD', returnStdout: true).trim()
|
||
env.IMAGE_TAG = sh(script: 'git rev-parse --short=12 HEAD', returnStdout: true).trim()
|
||
String databaseSuffix = env.DATABASE_CHANGE_DETECTED == 'true' ? ' | DB migration pending' : ''
|
||
currentBuild.description = "${env.SELECTED_SERVICES} | ${env.IMAGE_TAG}${databaseSuffix}"
|
||
echo "本次独立调度服务: ${env.SELECTED_SERVICES}"
|
||
}
|
||
if (env.DATABASE_CHANGE_DETECTED == 'true') {
|
||
echo '检测到 deploy/sql/ 变更：AUTO 不据此扩大服务范围；统一 SQL 须独立审核并执行。'
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
stage('生产环境部署确认（仅 production 执行）') {
|
||
when {
|
||
allOf {
|
||
expression { params.DEPLOY && env.RESOLVED_ENVIRONMENT == 'production' && env.NO_SERVICE_CHANGE != 'true' }
|
||
}
|
||
}
|
||
steps {
|
||
input message: "确认将 ${env.SELECTED_SERVICES} 的镜像 ${env.IMAGE_TAG} 分别部署到生产环境？", ok: '确认部署'
|
||
}
|
||
}
|
||
|
||
stage('统一 Maven 测试门禁') {
|
||
when {
|
||
expression { env.NO_SERVICE_CHANGE != 'true' && !params.SKIP_TESTS }
|
||
}
|
||
agent { label 'java-builder' }
|
||
tools { maven 'maven-3.8.8' }
|
||
steps {
|
||
script {
|
||
String selectedModules = env.SELECTED_SERVICES.split(',')
|
||
.collect { it.trim() }
|
||
.findAll { it }
|
||
.join(',')
|
||
echo "统一测试本次选中的服务及其公共依赖: ${selectedModules}"
|
||
sh """
|
||
test \"\$(git rev-parse HEAD)\" = \"${env.SOURCE_COMMIT}\"
|
||
mvn --settings deploy/maven/settings-ci.xml --batch-mode --errors -pl ${selectedModules} -am test
|
||
"""
|
||
echo "统一测试门禁通过: ${env.SOURCE_COMMIT}；下游单服务任务不再重复执行测试"
|
||
}
|
||
}
|
||
post {
|
||
always {
|
||
junit allowEmptyResults: true, testResults: '**/target/surefire-reports/TEST-*.xml'
|
||
}
|
||
}
|
||
}
|
||
|
||
stage('并行调度独立服务 Job') {
|
||
when { expression { env.NO_SERVICE_CHANGE != 'true' } }
|
||
steps {
|
||
script {
|
||
Map branches = [:]
|
||
env.SELECTED_SERVICES.split(',').each { selectedService ->
|
||
String service = selectedService
|
||
branches[service] = {
|
||
String jobName = "${env.RESOLVED_JOB_PREFIX}${service}"
|
||
boolean deployBothBridges = service == 'event-bridge-service'
|
||
&& ['BOTH', 'SELECT'].contains(params.EVENT_BRIDGE_REGION)
|
||
String downstreamImageTag = deployBothBridges
|
||
? "${env.IMAGE_TAG}-both"
|
||
: env.IMAGE_TAG
|
||
String downstreamBridgeRegion = deployBothBridges
|
||
? 'CN'
|
||
: params.EVENT_BRIDGE_REGION
|
||
echo "触发单服务 Job: ${jobName}"
|
||
def downstreamBuild = build(
|
||
job: jobName,
|
||
wait: true,
|
||
propagate: false,
|
||
parameters: [
|
||
string(name: 'SOURCE_COMMIT', value: env.SOURCE_COMMIT),
|
||
string(name: 'IMAGE_TAG', value: downstreamImageTag),
|
||
string(name: 'ENVIRONMENT', value: env.RESOLVED_ENVIRONMENT),
|
||
booleanParam(name: 'DEPLOY', value: params.DEPLOY),
|
||
// 总控已完成统一测试，或用户已明确选择跳过；下游仅负责编译、打包和部署。
|
||
booleanParam(name: 'SKIP_TESTS', value: true),
|
||
string(name: 'IMAGE_REPOSITORY', value: env.RESOLVED_IMAGE_REPOSITORY),
|
||
string(name: 'DOCKER_BASE_IMAGE', value: params.DOCKER_BASE_IMAGE),
|
||
// Choice 参数始终传递所有新旧 Job 都接受的单区值；
|
||
// 双区意图通过现有 IMAGE_TAG 参数携带，由下游还原真实镜像标签。
|
||
string(name: 'EVENT_BRIDGE_REGION', value: downstreamBridgeRegion)
|
||
]
|
||
)
|
||
downstreamResults[service] = downstreamBuild.result ?: 'UNKNOWN'
|
||
echo "${service} 执行结果: ${downstreamResults[service]} (${downstreamBuild.absoluteUrl})"
|
||
}
|
||
}
|
||
parallel branches
|
||
}
|
||
}
|
||
}
|
||
|
||
stage('汇总服务结果') {
|
||
when { expression { env.NO_SERVICE_CHANGE != 'true' } }
|
||
steps {
|
||
script {
|
||
List failed = downstreamResults.findAll { service, result -> result != 'SUCCESS' }
|
||
.collect { service, result -> "${service}=${result}" }
|
||
String summary = downstreamResults.collect { service, result -> "${service}=${result}" }.join(', ')
|
||
echo "单服务执行汇总: ${summary}"
|
||
currentBuild.description = "${env.IMAGE_TAG} | ${summary}"
|
||
if (failed) {
|
||
unstable("部分服务执行失败，但其他服务已独立完成：${failed.join(', ')}")
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
}
|