Integrate Harbor into Pipeline

After installing Harbor, access <NodeIP>:30002 and log in to the web console using the default account and password (admin/Harbor12345).

In the left navigation pane, click Projects, then click New Project.

In the dialog box that appears, set the project name to ks-devops-harbor and click OK.

Click the project you just created, go to the Robot Accounts tab, and click Add Robot Account.

In the dialog box that appears, set the robot account name to robot-test and the Expiration Time. Then, under Permissions, check all permissions for artifacts and repositories. Click Finish.

In the dialog box that appears, click Export to file to save the Harbor token.

Run the command vim /etc/docker/daemon.json on all cluster nodes to edit the daemon.json file, add the following content, and save the changes.

  "insecure-registries" : ["103.61.38.55:30002"]

{
  "log-opts": {
    "max-size": "5m",
    "max-file": "3"
  },
  // Note to add a comma
  "exec-opts": ["native.cgroupdriver=systemd"],
  "insecure-registries": ["103.61.38.55:30002"]
}

Run the following commands to restart Docker for the changes to take effect.

sudo systemctl daemon-reload

sudo systemctl restart docker

Log in to the KubeSphere console as the project-regular user and enter your workspace.

In the left navigation pane, select DevOps > Credentials.

Select a DevOps project from the drop-down list in the upper left corner of the page.

Click Create on the page.

On the Create Credential page, set the name (robot-test), select Username and password for Type, enter the value of name from the exported Harbor token file in Username, and enter the value of secret from the Harbor token file in Password/Token.

Click OK to save.

Go to the Pipelines page and click Create.

On the Basic Information tab, enter the name demo-pipeline, then click Next.

Use the default values in Advanced Settings and click Create.

Click the pipeline to enter its details page, then click Edit Jenkinsfile.

Copy and paste the following content into the Jenkinsfile. Note that you must replace REGISTRY, HARBOR_NAMESPACE, APP_NAME, and HARBOR_CREDENTIAL with your own values.

pipeline {
  agent {
    node {
      label 'maven'
    }
  }

  environment {
    // The address of your Harbor registry.
    REGISTRY = '103.61.38.55:30002'
    // Project name.
    // Ensure your robot account has sufficient access permissions to the project.
    HARBOR_NAMESPACE = 'ks-devops-harbor'
    // Docker image name.
    APP_NAME = 'docker-example'
    // 'robot-test' is the credential ID you created on the KubeSphere web console.
    HARBOR_CREDENTIAL = credentials('robot-test')
  }

  stages {
    stage('docker login') {
      steps{
        container ('maven') {
          // Replace the parameter after -u with the value of name from the Harbor token file, don't forget to add ''
          sh '''echo $HARBOR_CREDENTIAL_PSW|docker login $REGISTRY -u 'robot$robot-test' --password-stdin'''
        }
      }
    }

     stage('build & push') {
       steps {
         container ('maven') {
           sh 'git clone https://github.com/kstaken/dockerfile-examples.git'
           sh 'cd dockerfile-examples/rethinkdb && docker build -t $REGISTRY/$HARBOR_NAMESPACE/$APP_NAME:devops-test .'
           sh 'docker push$REGISTRY/$HARBOR_NAMESPACE/$APP_NAME:devops-test'
         }
       }
     }
  }
}