Integrate Harbor into Pipelines

After installing Harbor, access <NodeIP>:30002 and log in to the web console using the default account and password (admin/Harbor12345).

Click Projects in the left navigation pane, then click New Project.

In the dialog box that appears, set the project name ks-devops-harbor and click OK.

Click the project you just created, then click New Robot Account under the Robot Accounts tab.

In the dialog box that appears, set the robot account name robot-test and Expiration Time. Then check all permissions under Artifact and Repository. Click Finish.

In the dialog box that appears, click Export to file to save the Harbor token.

Run the command vim /etc/docker/daemon.json to edit the daemon.json file on all your cluster nodes, add the following content, and save the changes.

  "insecure-registries" : ["103.61.38.55:30002"]

{
  "log-opts": {
    "max-size": "5m",
    "max-file": "3"
  },
  "exec-opts": ["native.cgroupdriver=systemd"],
  "insecure-registries": ["103.61.38.55:30002"]
}

Run the following commands to restart Docker and apply the changes.

sudo systemctl daemon-reload
sudo systemctl restart docker

Log in to the KubeSphere web console as the project-regular user.

Click Workspace Management and enter your DevOps project.

On the Credentials page under DevOps Project Settings, create credentials for Harbor.

On the Create Credentials page, set the name (robot-test), select Username and password for Type, enter the value of name from the Harbor token file you just exported for Username, and enter the value of secret from the Harbor token file for Password/Token.

Click OK to save.

Go to the Pipelines page and click Create.

On the Basic Information tab, enter the name demo-pipeline and click Next.

Use the default values in Advanced Settings and click Create.

Click the pipeline to enter its detail page, then click Edit Jenkinsfile.

Copy and paste the following content into the Jenkinsfile. Note that you must replace REGISTRY, HARBOR_NAMESPACE, APP_NAME, and HARBOR_CREDENTIAL with actual values.

pipeline {
  agent {
    node {
      label 'maven'
    }
  }

  environment {
    // Your Harbor repository address.
    REGISTRY = '103.61.38.55:30002'
    // Project name.
    // Ensure your robot account has sufficient project access permissions.
    HARBOR_NAMESPACE = 'ks-devops-harbor'
    // Docker image name.
    APP_NAME = 'docker-example'
    // ‘robot-test’ is the credential ID you created on the KubeSphere web console.
    HARBOR_CREDENTIAL = credentials('robot-test')
  }

  stages {
    stage('docker login') {
      steps{
        container ('maven') {
          // Replace the parameter after -u with the name in the Harbor token file, do not forget to add ''
          sh '''echo $HARBOR_CREDENTIAL_PSW|docker login $REGISTRY -u 'robot$robot-test' --password-stdin'''
        }
      }
    }

     stage('build & push') {
       steps {
         container ('maven') {
           sh 'git clone https://github.com/kstaken/dockerfile-examples.git'
           sh 'cd dockerfile-examples/rethinkdb && docker build -t $REGISTRY/$HARBOR_NAMESPACE/$APP_NAME:devops-test .'
           sh 'docker push$REGISTRY/$HARBOR_NAMESPACE/$APP_NAME:devops-test'
         }
       }
     }
  }
}