addSonar
This commit is contained in:
孙小云
parent
9bf303ca15
commit
c0f182de3c
|
|
@ -0,0 +1,43 @@
|
|||
#!/bin/bash
|
||||
|
||||
echo "=== SonarQube Token 获取指南 ==="
|
||||
echo ""
|
||||
echo "1. 访问 SonarQube: https://sonar-ops.t-aaron.com"
|
||||
echo "2. 使用默认账号登录:"
|
||||
echo " - 用户名: admin"
|
||||
echo " - 密码: admin"
|
||||
echo ""
|
||||
echo "3. 获取 Token 步骤:"
|
||||
echo " - 点击右上角用户头像"
|
||||
echo " - 选择 'My Account'"
|
||||
echo " - 点击 'Security' 标签"
|
||||
echo " - 在 'Generate Tokens' 部分输入 Token 名称: 'drone-ci'"
|
||||
echo " - 点击 'Generate' 按钮"
|
||||
echo " - 复制生成的 Token"
|
||||
echo ""
|
||||
echo "4. 在 Drone 中添加 Secret:"
|
||||
echo " - 访问 Drone: https://drone-devops.t-aaron.com"
|
||||
echo " - 进入项目设置"
|
||||
echo " - 添加 Secret:"
|
||||
echo " - Name: SONAR_TOKEN"
|
||||
echo " - Value: [刚才复制的Token]"
|
||||
echo ""
|
||||
echo "5. 验证配置:"
|
||||
echo " - 提交代码触发构建"
|
||||
echo " - 查看构建日志中的 sonar-scan 步骤"
|
||||
echo ""
|
||||
|
||||
# 检查 SonarQube 是否可访问
|
||||
echo "=== 检查 SonarQube 连接 ==="
|
||||
if curl -s -o /dev/null -w "%{http_code}" https://sonar-ops.t-aaron.com | grep -q "200\|302"; then
|
||||
echo "✅ SonarQube 服务可访问"
|
||||
else
|
||||
echo "❌ SonarQube 服务不可访问，请检查服务状态"
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "=== 当前配置信息 ==="
|
||||
echo "SonarQube URL: https://sonar-ops.t-aaron.com"
|
||||
echo "项目 Key: springboot-demo"
|
||||
echo "项目名称: Spring Boot Demo"
|
||||
echo ""
|
||||
|
|
@ -0,0 +1,32 @@
|
|||
#!/bin/bash
|
||||
|
||||
echo "开始部署 SonarQube..."
|
||||
|
||||
# 应用 SonarQube 配置
|
||||
echo "应用 SonarQube 部署配置..."
|
||||
kubectl apply -f sonar-deployment.yaml
|
||||
|
||||
# 应用 Ingress 配置（单独文件）
|
||||
echo "应用 SonarQube Ingress 配置..."
|
||||
kubectl apply -f sonar-ingress.yaml
|
||||
|
||||
# 等待 Pod 启动
|
||||
echo "等待 SonarQube Pod 启动..."
|
||||
kubectl wait --for=condition=Ready pod -l app=sonar -n default --timeout=300s
|
||||
|
||||
# 检查部署状态
|
||||
echo "检查 SonarQube 部署状态..."
|
||||
kubectl get pods -n default
|
||||
kubectl get svc -n default
|
||||
kubectl get ingress -n default
|
||||
|
||||
# 显示访问信息
|
||||
echo ""
|
||||
echo "SonarQube 部署完成！"
|
||||
echo "访问地址: http://sonar-ops.t-aaron.com/sonar"
|
||||
echo "默认用户名/密码: admin/admin"
|
||||
echo ""
|
||||
echo "等待服务完全启动（可能需要几分钟）..."
|
||||
echo "可以使用以下命令检查状态："
|
||||
echo "kubectl get pods -n default"
|
||||
echo "kubectl logs -f deployment/sonar -n default"
|
||||
|
|
@ -0,0 +1,167 @@
|
|||
# SonarQube 使用 devops 命名空间
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: sonar-pv
|
||||
spec:
|
||||
capacity:
|
||||
storage: 10Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: local-storage
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
hostPath:
|
||||
path: /opt/sonar
|
||||
type: DirectoryOrCreate
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node-role.kubernetes.io/control-plane
|
||||
operator: Exists
|
||||
---
|
||||
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: sonar-pvc
|
||||
namespace: default
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
storageClassName: local-storage
|
||||
volumeName: sonar-pv
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: sonar-config
|
||||
namespace: default
|
||||
data:
|
||||
sonar.properties: |
|
||||
sonar.web.host=0.0.0.0
|
||||
sonar.web.port=9000
|
||||
sonar.web.context=/sonar
|
||||
sonar.jdbc.url=jdbc:h2:tcp://localhost:9092/sonar
|
||||
sonar.jdbc.driverClassName=org.h2.Driver
|
||||
sonar.jdbc.username=sonar
|
||||
sonar.jdbc.password=sonar
|
||||
sonar.embeddedDatabase.port=9092
|
||||
sonar.search.port=9001
|
||||
sonar.search.javaOpts=-Xmx512m -Xms512m -XX:+HeapDumpOnOutOfMemoryError
|
||||
sonar.web.javaOpts=-Xmx512m -Xms512m -XX:+HeapDumpOnOutOfMemoryError
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: sonar
|
||||
namespace: default
|
||||
labels:
|
||||
app: sonar
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: sonar
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: sonar
|
||||
spec:
|
||||
securityContext:
|
||||
fsGroup: 1000
|
||||
runAsUser: 1000
|
||||
runAsGroup: 1000
|
||||
initContainers:
|
||||
- name: fix-permissions
|
||||
image: registry.t-aaron.com/busybox:1.36
|
||||
command: ["sh","-c"]
|
||||
args:
|
||||
- chown -R 1000:1000 /opt/sonarqube/data /opt/sonarqube/logs /opt/sonarqube/extensions || true;
|
||||
volumeMounts:
|
||||
- name: sonar-data
|
||||
mountPath: /opt/sonarqube/data
|
||||
- name: sonar-logs
|
||||
mountPath: /opt/sonarqube/logs
|
||||
- name: sonar-extensions
|
||||
mountPath: /opt/sonarqube/extensions
|
||||
containers:
|
||||
- name: sonar
|
||||
image: registry.t-aaron.com/sonarqube:9.9-community
|
||||
ports:
|
||||
- containerPort: 9000
|
||||
securityContext:
|
||||
runAsUser: 1000
|
||||
runAsGroup: 1000
|
||||
env:
|
||||
- name: SONAR_ES_BOOTSTRAP_CHECKS_DISABLE
|
||||
value: "true"
|
||||
- name: SONAR_JDBC_URL
|
||||
value: "jdbc:h2:tcp://localhost:9092/sonar"
|
||||
- name: SONAR_JDBC_USERNAME
|
||||
value: "sonar"
|
||||
- name: SONAR_JDBC_PASSWORD
|
||||
value: "sonar"
|
||||
resources:
|
||||
requests:
|
||||
memory: "1Gi"
|
||||
cpu: "300m"
|
||||
limits:
|
||||
memory: "2Gi"
|
||||
cpu: "800m"
|
||||
volumeMounts:
|
||||
- name: sonar-data
|
||||
mountPath: /opt/sonarqube/data
|
||||
- name: sonar-logs
|
||||
mountPath: /opt/sonarqube/logs
|
||||
- name: sonar-extensions
|
||||
mountPath: /opt/sonarqube/extensions
|
||||
- name: sonar-conf
|
||||
mountPath: /opt/sonarqube/conf/sonar.properties
|
||||
subPath: sonar.properties
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /sonar/api/system/status
|
||||
port: 9000
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 30
|
||||
timeoutSeconds: 10
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /sonar/api/system/status
|
||||
port: 9000
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
volumes:
|
||||
- name: sonar-data
|
||||
persistentVolumeClaim:
|
||||
claimName: sonar-pvc
|
||||
- name: sonar-logs
|
||||
emptyDir: {}
|
||||
- name: sonar-extensions
|
||||
emptyDir: {}
|
||||
- name: sonar-conf
|
||||
configMap:
|
||||
name: sonar-config
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: sonar-service
|
||||
namespace: default
|
||||
labels:
|
||||
app: sonar
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- port: 9000
|
||||
targetPort: 9000
|
||||
protocol: TCP
|
||||
name: http
|
||||
selector:
|
||||
app: sonar
|
||||
|
|
@ -0,0 +1,26 @@
|
|||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: sonar-ingress
|
||||
namespace: default
|
||||
annotations:
|
||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
spec:
|
||||
tls:
|
||||
- hosts:
|
||||
- sonar-ops.t-aaron.com
|
||||
secretName: tls
|
||||
rules:
|
||||
- host: sonar-ops.t-aaron.com
|
||||
http:
|
||||
paths:
|
||||
- path: /sonar
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: sonar-service
|
||||
port:
|
||||
number: 9000
|
||||
|
||||
|
||||
Loading…
Reference in New Issue