moshloop/stateless-jenkins

Stateless jenkins is a batteries included dockerized configuration of jenkins that is intended to be 100% stateless. i.e. volume persistence is not required.

Stateless jenkins is configure by specifying one or more REPO's as an environment variables. Each REPO can either be a local file path or a remote git repo.

For each REPO stateless-jenkins will:

• Check for a Jenkinsfile and if found create a job with the REPO name.
• Check for a jobs directory and create a new job per file inside the directory.
• Search for any subdirectory with a Jenkinsfile and create a job in a folder for that directory.
• Check for a Jenkinsfile.repos text file containing a full repo path per line and recursively clone and bootstrap each repo.

Folder Structure

├── Jenkinsfile
├── jobs
│   ├── Job 1.jenkinsfile
│   ├── Job 2.jenkinsfile
├── Job 3
│   ├── Jenkinsfile
├── Job 4
│   ├── Jenkinsfile

The above example will create a folder with 5 jobs (1 called Base for the root Jenkinsfile)

You can leverage the job-dsl-plugin by creating 2 files:

Jenkinsfile

pipeline {
    agent any
    triggers {
        pollSCM("H/5 * * * *")
    }
    stages {
        stage('Update Jobs') {
            steps {
              sshagent(['deploy']) {
                    checkout scm
                    jobDsl removedConfigFilesAction: 'DELETE', removedJobAction: 'DELETE', removedViewAction: 'DELETE', targets: 'Jenkinsfile.job'
                }
            }
        }
    }
}

Jenkinsfile.job

job('PROJ-unit-tests') {
    scm {
        git(gitUrl)
    }
    triggers {
        scm('*/15 * * * *')
    }
    steps {
        maven('-e clean test')
    }
}

Jenkins installed to: /var/jenkins:

• Blue Ocean
• AWS, Azure, AD, LDAP, Bitbucket plugins

Additional Tools

• ansible-2.6.1 with python dependencies for most modules
• systools
• fireviz
• waiter
• govc
• packer
• docker, lstags, reg
• summon
• aws cli

Run a docker container mapping the keys into the container using a volume:

docker run  -p 8080:8080 -e [email protected]/org/jenkins-jobs.git -e DEPLOY_KEY=/etc/jenkins/keys/ssh-private -v $PWD/ssh-private/ssh-keys:/etc/jenkins/keys/ssh-private --privileged --rm jenkins

Create or import a Kubernetes SSH secret:

kubectl create secret generic deploy-key --from-file=ssh-private=~/.ssh/id_rsa

Mount the SSH keys as a volume

apiVersion: apps/v1beta1
kind: Deployment
metadata:
  name: jenkins
spec:
  replicas: 1
  template:
    metadata:
      labels:
        app: jenkins
    spec:
      securityContext:
        privileged: true
      containers:
      - env:
        - name: REPO
          value: [email protected]/org/jenkins-jobs.git
        image: moshloop/stateless-jenkins:3.32
        imagePullPolicy: Always
        name: jenkins
        ports:
        - containerPort: 8080
          protocol: TCP
        volumeMounts:
        - mountPath: /etc/jenkins/keys/
          name: deploy-keys
      volumes:
      - name: deploy-key
        secret:
          secretName: deploy-key

python update-plugins.py plugins.txt