jenkins+python+kubectl实现批量更新k8s镜像

一、jenkins使用官方镜像（官方镜像默认是jenkins用户，权限太低）

　　因此通过dockerfile重新改为root启动

　　

FROM         jenkins/jenkins:lts
MAINTAINER    dwy

COPY	get-pip.py /tmp/
# if we want to install via apt
USER root
RUN   python /tmp/get-pip.py 
	&& pip install requests

RUN apt-get update && apt-get install -y apt-transport-https 
	&& curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl 
	&&  chmod +x ./kubectl 
	&&  mv ./kubectl /usr/local/bin/kubectl 
	&& mkdir /root/.kube 
    && touch /root/.kube/config 
	&& apt-get install vim -y
	
# drop back to the regular jenkins user - good practice
#USER jenkins

二、容器启动后，创建/root/.kube/config文件

     然后在k8s集群里面下载对应kubeconfig.json，将文件内容复制到/root/.kube/config里面

三、jenkins安装python插件

具体代码如下

#!/usr/bin/env python
# -*- coding: utf-8 -*-


import requests
import json,sys
from subprocess import Popen,PIPE


image_tag_list = [
    ["hlike","nginx","201804h2_0721"],
    ["hlik","slm",""],
]


for n,li in enumerate(image_tag_list,1):
  print "num %s execute: ******************************************************************" %n
  namespace = li[0]
  repository = li[1]
  tag = li[2] #文件读取出
  uri="swr-api.cn-north-1.myhuaweicloud.com" #北京swr-api
  url = "https://%s/v2/manage/namespaces/%s/repos/%s/tags" %(uri,namespace,repository) #根据官方容器镜像仓库api获取对应image：tag
  res = requests.get(url, headers=headers).json() #这里我没写token，具体仓库，具体自己分析一下api如何获取信息，
  tag_exist = False

  if type(res) == dict and res.has_key("errors"):
    print "log: %s/%s is wrong!!!!!" %(namespace,repository)
    sys.exit(1)
  for line in res: #循环返回的结果，得到镜像对应信息
    if line["Tag"] == tag :#比较返回tag和文件里面的tag是否有相等，若相等，说仓库存在对应镜像
       tag_exist = True
       print "%s/%s %s is  exist!!!!!!!!!" % (namespace, repository, tag)
       updated = line["updated"]
       path = line["path"]
       cmd1 = "kubectl set image deployment/%s %s=%s" %(repository,repository,path)
       print "log: now is setting image,cmd: ",cmd1
       ret = excute(cmd1)
       print ret
  if not tag_exist:
    print "log: %s/%s %s is not exist" %(namespace,repository,tag)
    sys.exit(1)