Environment: Production
\ -Version: ${IMAGE_TAG}
\ -" > /usr/share/nginx/html/index.html - -# Copy custom Nginx configuration into container -COPY nginx.conf /etc/nginx/nginx.conf - -# Expose HTTP port (documentation only, runtime handled by Kubernetes) -EXPOSE 80 - -# Run Nginx in foreground (required for containers) -CMD ["nginx", "-g", "daemon off;"] - -EOF - ''' - - // Shell block to generate nginx.conf dynamically - sh ''' - # Create Nginx configuration file - cat > nginx.conf << 'EOF' - -# User under which Nginx worker processes run -user nginx; - -# Automatically scale workers to CPU cores -worker_processes auto; - -# Error log configuration -error_log /var/log/nginx/error.log warn; - -# PID file location -pid /var/run/nginx.pid; - -# Event handling configuration -events { - # Maximum number of simultaneous connections per worker - worker_connections 1024; -} - -http { - # Load MIME types - include /etc/nginx/mime.types; - - # Default MIME type - default_type application/octet-stream; - - # Define access log format - log_format main '$remote_addr - $remote_user [$time_local] "$request" ' - '$status $body_bytes_sent "$http_referer" ' - '"$http_user_agent" "$http_x_forwarded_for"'; - - # Enable access logging - access_log /var/log/nginx/access.log main; - - # Enable zero-copy file transfers - sendfile on; - - # Keepalive timeout for client connections - keepalive_timeout 65; - - # HTTP server definition - server { - - # Listen on port 80 - listen 80; - - # Default catch-all server name - server_name _; - - # Root location serving static content - location / { - root /usr/share/nginx/html; - index index.html; - } - - # Health endpoint for Kubernetes probes - location /health { - # Disable access logs for health checks - access_log off; - - # Always return HTTP 200 - return 200 "healthy\n"; - - # Explicit content type - add_header Content-Type text/plain; - } - } -} - -EOF - ''' - } - } - - // ============================ - // STAGE: Build Docker image - // ============================ - stage('Build Docker Image') { - steps { - script { - - // Log which image is being built - echo "Building Docker image: ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG}" - - // Build Docker image - sh """ - docker build \ - # Versioned image tag - -t ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG} \ - # Latest tag for convenience - -t ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:latest \ - # Build context = current workspace - . - """ - - // Success marker - echo "✅ Image built successfully!" - } - } - } - - // ============================ - // STAGE: Push image to registry - // ============================ - stage('Push to Registry') { - - // Execute this stage ONLY on main branch - when { branch 'main' } - - steps { - script { - - echo "Pushing image to registry..." - - // Inject Docker registry credentials from Jenkins - withCredentials([usernamePassword( - credentialsId: 'docker-registry-credentials', - usernameVariable: 'DOCKER_USER', - passwordVariable: 'DOCKER_PASS' - )]) { - - sh """ - # Login to Docker registry using stdin (secure) - echo "\${DOCKER_PASS}" | docker login ${DOCKER_REGISTRY} \ - -u "\${DOCKER_USER}" --password-stdin - - # Push versioned image - docker push ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG} - - # Push latest tag - docker push ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:latest - - # Logout for security hygiene - docker logout ${DOCKER_REGISTRY} - """ - } - - echo "✅ Image pushed successfully!" - } - } - } - - // ============================ - // STAGE: Update GitOps manifests - // ============================ - stage('Update GitOps Manifests') { - - // GitOps updates only from main branch - when { branch 'main' } - - steps { - script { - - echo "Updating Kubernetes manifests..." - - // Inject Gitea credentials - withCredentials([usernamePassword( - credentialsId: 'gitea-credentials', - usernameVariable: 'GIT_USER', - passwordVariable: 'GIT_PASS' - )]) { - - sh """ - # Remove previous repo clone if exists - rm -rf k3s-gitops || true - - # Clone GitOps repository with credentials - git clone http://\${GIT_USER}:\${GIT_PASS}@gitea-http.gitea.svc.cluster.local:3000/admin/k3s-gitops.git - - # Enter repository directory - cd k3s-gitops - - # Configure Git identity for Jenkins commits - git config user.name "Jenkins" - git config user.email "jenkins@thedevops.dev" - - # Update image field in Kubernetes Deployment manifest - sed -i 's|image: .*|image: ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG}|' \ - apps/demo-nginx/deployment.yaml - - # Stage changed file - git add apps/demo-nginx/deployment.yaml - - # Commit change (ignore if no diff) - git commit -m "chore(demo-nginx): Update image to ${IMAGE_TAG}" || echo "No changes" - - # Push change to main branch - git push origin main - """ - } - - echo "✅ Manifests updated!" - } - } - } - - // ============================ - // STAGE: Verify Kubernetes deployment - // ============================ - stage('Verify Deployment') { - - // Only verify deployments from main - when { branch 'main' } - - steps { - script { - - echo "Verifying deployment..." - - sh """ - # Give Kubernetes time to start rollout - sleep 30 - - # Check rollout status (do not fail pipeline hard) - kubectl rollout status deployment/${APP_NAME} \ - -n ${NAMESPACE} --timeout=300s || true - - # List pods for visibility - kubectl get pods -n ${NAMESPACE} -l app=${APP_NAME} - """ - - echo "✅ Deployment completed!" - } - } - } - } - - // ============================ - // POST actions (always executed) - // ============================ - post { - - // On successful pipeline execution - success { - echo """ - ✅ Pipeline SUCCESS! - Image: ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG} - Namespace: ${NAMESPACE} - """ - } - - // On pipeline failure - failure { - echo "❌ Pipeline failed!" - } - - // Always executed (success or failure) - always { - - // Cleanup local Docker images to free disk space - sh """ - docker rmi ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG} || true - docker rmi ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:latest || true - - # Stop and remove any temporary test containers - docker stop test-${BUILD_NUMBER} 2>/dev/null || true - docker rm test-${BUILD_NUMBER} 2>/dev/null || true - """ - - // Clean Jenkins workspace directory - cleanWs() - } - } -}