在Jenkins Slave中运行Kaniko

Question

我想在詹金斯像个奴隶一样管理卡尼科。我的管道在docker插件上运行，我如何使用kaniko设置gcr凭据。

我要将GCR凭证上传到Jenkins Master服务器。

我的pipeline groovy如下所示：

node("kaniko-jnlp") {
stage('Building Stage') {
  git 'https://github.com/jenkinsci/docker-jnlp-slave.git'

      sh ''' /kaniko/executor -f `pwd`/Dockerfile -c `pwd` --insecure- 
               skip-tls-verify --cache=true 
             --- destination=gcr.io/project/project:v1 '''
    } 

Answer 1

我正在使用Kaniko构建镜像并推送到私有repo。我的Kaniko docker镜像使用Kubernetes pull-secret进行身份验证，但您应该能够使用以下代码：

stage('Kaniko') {
        environment {
            ARTIFACTORY_CREDS = credentials('your-credentials')
        }
        steps{
            sh "echo ********** EXAMPLE APP **********"
            container(name: 'kaniko', shell: '/busybox/sh') {
              withEnv(['PATH+EXTRA=/busybox']) {
                  sh '''#!/busybox/sh
                  /kaniko/executor --context `pwd` --cleanup --dockerfile=your/Dockerfile --build-arg ARTIFACTORY_USER=$ARTIFACTORY_CREDS_USR --build-arg ARTIFACTORY_PASS=$ARTIFACTORY_CREDS_PSW --destination=your.docker.repo/team/image:tag
                  '''
              }
            }
        }
}

Answer 2

我运行封装在pod中的整个流水线，下面是我如何使用Kaniko：

pipeline {
  agent {
    kubernetes {
      yaml """
apiVersion: v1
kind: Pod
metadata:
  labels:
    jenkins: worker
spec:
  containers:
  - name: kaniko
    image: gcr.io/kaniko-project/executor:debug
    command: ["/busybox/cat"]
    tty: true
    volumeMounts:
      - name: dockercred
        mountPath: /root/.docker/
  volumes:
  - name: dockercred
    secret:
      secretName: dockercred
"""
    }
  }
  stages {
    stage('Stage 1: Build with Kaniko') {
      steps {
        container('kaniko') {
          sh '/kaniko/executor --context=git://github.com/repository/project.git \
                  --destination=repository/image:tag \
                  --insecure \
                  --skip-tls-verify  \
                  -v=debug'
        }
      }
    }  
  }
}