MiFaZhan
c65fe7520f
Jenkins 的 job 已移入文件夹 iotlcm-opensrc，访问路径变为 /job/iotlcm-opensrc/job/iotlcm-oss-build/，原硬编码的 /job/iotlcm-oss-build/ 会 404。 改为读取组织密钥 JENKINS_JOB_PATH，默认回退到旧路径。 以后 Jenkins 里再移动 job 只需改该密钥，不必改 11 个仓。
81 lines
2.8 KiB
YAML
81 lines
2.8 KiB
YAML
name: trigger-jenkins-oss
|
||
|
||
# 打 tag 时触发 Jenkins 构建开源镜像并推送到镜像仓库。
|
||
# 仅在 tag 推送时触发；main 分支的日常提交不触发。
|
||
on:
|
||
push:
|
||
tags:
|
||
- 'v*'
|
||
workflow_dispatch:
|
||
|
||
# 同一 ref 连续触发时取消旧任务，只跑最新的
|
||
concurrency:
|
||
group: ${{ github.ref }}
|
||
cancel-in-progress: true
|
||
|
||
jobs:
|
||
trigger:
|
||
runs-on: host
|
||
steps:
|
||
- name: 触发 Jenkins 镜像构建
|
||
env:
|
||
JU: ${{ secrets.JENKINS_USER }}
|
||
JT: ${{ secrets.JENKINS_API_TOKEN }}
|
||
JURL: ${{ secrets.JENKINS_URL }}
|
||
JOB_PATH: ${{ secrets.JENKINS_JOB_PATH }}
|
||
REPO_NAME: ${{ github.event.repository.name }}
|
||
TAG_NAME: ${{ github.ref_name }}
|
||
run: |
|
||
set -eu
|
||
|
||
# 只有 tag 推送才构建；手动触发时按 tag 取，没有就退出
|
||
case "${GITHUB_REF:-}" in
|
||
refs/tags/v*) ;;
|
||
*)
|
||
if [ "${GITHUB_EVENT_NAME:-}" != "workflow_dispatch" ]; then
|
||
echo "非 tag 推送，跳过：${GITHUB_REF:-unknown}"
|
||
exit 0
|
||
fi
|
||
;;
|
||
esac
|
||
|
||
if [ -z "${TAG_NAME:-}" ]; then
|
||
echo "未取到 tag 名，退出"
|
||
exit 1
|
||
fi
|
||
|
||
# job 在 Jenkins 文件夹下的路径（组织密钥 JENKINS_JOB_PATH），
|
||
# 例如 job/iotlcm-opensrc/job/iotlcm-oss-build。
|
||
# 用密钥而非硬编码，Jenkins 里移动 job 时不用改 11 个仓。
|
||
JP="${JOB_PATH:-job/iotlcm-oss-build}"
|
||
|
||
echo "仓库：$REPO_NAME 版本：$TAG_NAME job：$JP"
|
||
|
||
WORK=$(mktemp -d)
|
||
trap 'rm -rf "$WORK"' EXIT
|
||
|
||
# 取 CSRF crumb
|
||
curl -s -c "$WORK/cj" -u "$JU:$JT" "$JURL/crumbIssuer/api/json" -o "$WORK/crumb.json"
|
||
CR=$(python3 -c "import json;print(json.load(open('$WORK/crumb.json'))['crumb'])")
|
||
|
||
# 触发参数化任务：SERVICES=仓库名，VERSION=tag
|
||
code=$(curl -s -o "$WORK/out" -w '%{http_code}' -X POST -b "$WORK/cj" -u "$JU:$JT" \
|
||
-H "Jenkins-Crumb: $CR" \
|
||
--data-urlencode "SERVICES=$REPO_NAME" \
|
||
--data-urlencode "VERSION=$TAG_NAME" \
|
||
--data-urlencode "FORCE=true" \
|
||
"$JURL/$JP/buildWithParameters")
|
||
|
||
echo "Jenkins 触发 HTTP $code"
|
||
if [ "$code" != "201" ] && [ "$code" != "200" ] && [ "$code" != "302" ] && [ "$code" != "303" ]; then
|
||
echo "触发失败："
|
||
cat "$WORK/out"
|
||
exit 1
|
||
fi
|
||
|
||
LINK="$JURL/$JP/"
|
||
echo "=========================================="
|
||
echo "Jenkins 构建：$LINK"
|
||
echo "=========================================="
|
||
echo "::notice title=Jenkins 镜像构建::[$LINK]($LINK)"
|