jenkins+python+kubectl实现批量更新k8s镜像

一、jenkins使用官方镜像（官方镜像默认是jenkins用户，权限太低）

　　因此通过dockerfile重新改为root启动

　　

FROM         jenkins/jenkins:lts
MAINTAINER    dwy

COPY	get-pip.py /tmp/
# if we want to install via apt
USER root
RUN   python /tmp/get-pip.py \
	&& pip install requests

RUN apt-get update && apt-get install -y apt-transport-https \
	&& curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl \
	&&  chmod +x ./kubectl \
	&&  mv ./kubectl /usr/local/bin/kubectl \
	&& mkdir /root/.kube \
    && touch /root/.kube/config \
	&& apt-get install vim -y

# drop back to the regular jenkins user - good practice
#USER jenkins

二、容器启动后，创建/root/.kube/config文件

然后在k8s集群里面下载对应kubeconfig.json，将文件内容复制到/root/.kube/config里面

三、jenkins安装python插件

具体代码如下

 #!/usr/bin/env python
 # -*- coding: utf-8 -*-

 import requests
 import json,sys
 from subprocess import Popen,PIPE

 image_tag_list = [
     ["hlike","nginx","201804h2_0721"],
     ["hlik","slm",""],
 ]

 for n,li in enumerate(image_tag_list,1):
   print "num %s execute: ******************************************************************" %n
   namespace = li[0]
   repository = li[1]
   tag = li[2] #文件读取出
   uri="swr-api.cn-north-1.myhuaweicloud.com" #北京swr-api
   url = "https://%s/v2/manage/namespaces/%s/repos/%s/tags" %(uri,namespace,repository) #根据官方容器镜像仓库api获取对应image：tag
   res = requests.get(url, headers=headers).json() #这里我没写token，具体仓库，具体自己分析一下api如何获取信息，
   tag_exist = False

   if type(res) == dict and res.has_key("errors"):
     print "log: %s/%s is wrong!!!!!" %(namespace,repository)
     sys.exit(1)
   for line in res: #循环返回的结果，得到镜像对应信息
     if line["Tag"] == tag :#比较返回tag和文件里面的tag是否有相等，若相等，说仓库存在对应镜像
        tag_exist = True
        print "%s/%s %s is  exist!!!!!!!!!" % (namespace, repository, tag)
        updated = line["updated"]
        path = line["path"]
        cmd1 = "kubectl set image deployment/%s %s=%s" %(repository,repository,path)
        print "log: now is setting image,cmd: ",cmd1
        ret = excute(cmd1)
        print ret
   if not tag_exist:
     print "log: %s/%s %s is not exist" %(namespace,repository,tag)
     sys.exit(1)