Environment: Production
\ +Version: ${IMAGE_TAG}
\ +" > /usr/share/nginx/html/index.html + +# Copy custom Nginx configuration into container +COPY nginx.conf /etc/nginx/nginx.conf + +# Expose HTTP port (documentation only, runtime handled by Kubernetes) +EXPOSE 80 + +# Run Nginx in foreground (required for containers) +CMD ["nginx", "-g", "daemon off;"] + +EOF + ''' + + // Shell block to generate nginx.conf dynamically + sh ''' + # Create Nginx configuration file + cat > nginx.conf << 'EOF' + +# User under which Nginx worker processes run +user nginx; + +# Automatically scale workers to CPU cores +worker_processes auto; + +# Error log configuration +error_log /var/log/nginx/error.log warn; + +# PID file location +pid /var/run/nginx.pid; + +# Event handling configuration +events { + # Maximum number of simultaneous connections per worker + worker_connections 1024; +} + +http { + # Load MIME types + include /etc/nginx/mime.types; + + # Default MIME type + default_type application/octet-stream; + + # Define access log format + log_format main '$remote_addr - $remote_user [$time_local] "$request" ' + '$status $body_bytes_sent "$http_referer" ' + '"$http_user_agent" "$http_x_forwarded_for"'; + + # Enable access logging + access_log /var/log/nginx/access.log main; + + # Enable zero-copy file transfers + sendfile on; + + # Keepalive timeout for client connections + keepalive_timeout 65; + + # HTTP server definition + server { + + # Listen on port 80 + listen 80; + + # Default catch-all server name + server_name _; + + # Root location serving static content + location / { + root /usr/share/nginx/html; + index index.html; + } + + # Health endpoint for Kubernetes probes + location /health { + # Disable access logs for health checks + access_log off; + + # Always return HTTP 200 + return 200 "healthy\n"; + + # Explicit content type + add_header Content-Type text/plain; + } + } +} + +EOF + ''' + } + } + + // ============================ + // STAGE: Build Docker image + // ============================ + stage('Build Docker Image') { + steps { + script { + + // Log which image is being built + echo "Building Docker image: ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG}" + + // Build Docker image + sh """ + docker build \ + # Versioned image tag + -t ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG} \ + # Latest tag for convenience + -t ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:latest \ + # Build context = current workspace + . + """ + + // Success marker + echo "✅ Image built successfully!" + } + } + } + + // ============================ + // STAGE: Push image to registry + // ============================ + stage('Push to Registry') { + + // Execute this stage ONLY on main branch + when { branch 'main' } + + steps { + script { + + echo "Pushing image to registry..." + + // Inject Docker registry credentials from Jenkins + withCredentials([usernamePassword( + credentialsId: 'docker-registry-credentials', + usernameVariable: 'DOCKER_USER', + passwordVariable: 'DOCKER_PASS' + )]) { + + sh """ + # Login to Docker registry using stdin (secure) + echo "\${DOCKER_PASS}" | docker login ${DOCKER_REGISTRY} \ + -u "\${DOCKER_USER}" --password-stdin + + # Push versioned image + docker push ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG} + + # Push latest tag + docker push ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:latest + + # Logout for security hygiene + docker logout ${DOCKER_REGISTRY} + """ + } + + echo "✅ Image pushed successfully!" + } + } + } + + // ============================ + // STAGE: Update GitOps manifests + // ============================ + stage('Update GitOps Manifests') { + + // GitOps updates only from main branch + when { branch 'main' } + + steps { + script { + + echo "Updating Kubernetes manifests..." + + // Inject Gitea credentials + withCredentials([usernamePassword( + credentialsId: 'gitea-credentials', + usernameVariable: 'GIT_USER', + passwordVariable: 'GIT_PASS' + )]) { + + sh """ + # Remove previous repo clone if exists + rm -rf k3s-gitops || true + + # Clone GitOps repository with credentials + git clone http://\${GIT_USER}:\${GIT_PASS}@gitea-http.gitea.svc.cluster.local:3000/admin/k3s-gitops.git + + # Enter repository directory + cd k3s-gitops + + # Configure Git identity for Jenkins commits + git config user.name "Jenkins" + git config user.email "jenkins@thedevops.dev" + + # Update image field in Kubernetes Deployment manifest + sed -i 's|image: .*|image: ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG}|' \ + apps/demo-nginx/deployment.yaml + + # Stage changed file + git add apps/demo-nginx/deployment.yaml + + # Commit change (ignore if no diff) + git commit -m "chore(demo-nginx): Update image to ${IMAGE_TAG}" || echo "No changes" + + # Push change to main branch + git push origin main + """ + } + + echo "✅ Manifests updated!" + } + } + } + + // ============================ + // STAGE: Verify Kubernetes deployment + // ============================ + stage('Verify Deployment') { + + // Only verify deployments from main + when { branch 'main' } + + steps { + script { + + echo "Verifying deployment..." + + sh """ + # Give Kubernetes time to start rollout + sleep 30 + + # Check rollout status (do not fail pipeline hard) + kubectl rollout status deployment/${APP_NAME} \ + -n ${NAMESPACE} --timeout=300s || true + + # List pods for visibility + kubectl get pods -n ${NAMESPACE} -l app=${APP_NAME} + """ + + echo "✅ Deployment completed!" + } + } + } + } + + // ============================ + // POST actions (always executed) + // ============================ + post { + + // On successful pipeline execution + success { + echo """ + ✅ Pipeline SUCCESS! + Image: ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG} + Namespace: ${NAMESPACE} + """ + } + + // On pipeline failure + failure { + echo "❌ Pipeline failed!" + } + + // Always executed (success or failure) + always { + + // Cleanup local Docker images to free disk space + sh """ + docker rmi ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:${IMAGE_TAG} || true + docker rmi ${DOCKER_REGISTRY}/${DOCKER_REPO}/${APP_NAME}:latest || true + + # Stop and remove any temporary test containers + docker stop test-${BUILD_NUMBER} 2>/dev/null || true + docker rm test-${BUILD_NUMBER} 2>/dev/null || true + """ + + // Clean Jenkins workspace directory + cleanWs() + } + } +}