从 jenkinsfile 引用 Serverless.yml 文件中的环境变量

Question

我正在尝试在我的 serverless.yml 文件中引用在我的 jenkinsfile 中设置的变量。

在 jenkinsfile 我有这个

environment {
   HELLO = 'hello-world'
 }

在 serverless.yml 文件中我有这个

custom:
  secret: ${env:HELLO}

运行 jenkins 管道时出现此错误

A valid environment variable to satisfy the declaration 'env:HELLO' could not be found.

这是我要求的完整 jenkins 文件，最终目标是我想使用 val1 和 val2 以及 env 变量，但如果我能弄清楚如何使用 hello world，那就是一回事了。

import com.lmig.intl.cloud.jenkins.exception.BuildException

def getJobName() {
   return env.JOB_NAME
}

environment {
   HELLO = 'hello-world'

 }

def getEnvironment() {

   def jobName = getJobName().split('/')
   def environment = jobName[1].toLowerCase()
   return environment.toLowerCase()
}

node('linux'){

  stage('Checkout'){
      checkout scm
  }
  stage('Pull Secrets From Vault'){
     withAWS(credentials:'aws-cred'){
        def secret = vaultPullSecrets(app:"sls-auxiliary-service",appenv:"nonprod",runtime:'nonprod',keys:'["saslusername","saslpassword"]')
        def val1 = new groovy.json.JsonSlurper().parseText(secret)[0].SASLUSERNAME
        def val2 = new groovy.json.JsonSlurper().parseText(secret)[1].SASLPASSWORD
        if(val1 != '' && val2 != ''){
            echo "Vault Secret pulled Successfully"
        }else{
            echo "Vault Secret Not Found"
            throw new BuildException("Vault Secret Not Found")
        }
     }
  }
  stage('Deploy') {
        def ENVIRONMENT = getEnvironment().replaceAll("\\_","")
        withAWS(credentials:'aws-cred') {
             sh 'npm i serverless-python-requirements'
             sh 'npm install --save-dev serverless-step-functions'
             sh 'npm install serverless-deployment-bucket --save-dev'
             sh 'npm i serverless-pseudo-parameters'
             sh 'npm i serverless-plugin-resource-tagging'
             sh 'pip3 install --user -r requirements.txt'
             sh "serverless deploy --stage ${ENVIRONMENT}"
        }
  }

} 

Answer 1

你可以使用sed来替换占位符：${env:HELLO}真实值，如果你能让jenkin作业总是在Linux slave上执行。

stage('Pull Secrets From Vault'){
  withAWS(credentials:'aws-cred'){
    def secret = vaultPullSecrets(app:"sls-auxiliary-service",appenv:"nonprod",runtime:'nonprod',keys:'["saslusername","saslpassword"]')
    def val1 = new groovy.json.JsonSlurper().parseText(secret)[0].SASLUSERNAME

    sh """
      sed -i 's/\${env:HELLO}/${val1}/' <relative path to>/serverless.yml
    """

我用一个简单的管道进行了快速练习，如下所示，sed 我给出的命令运行良好。

node('docker') {

 stage('A') {
    sh '''
        set +x
        echo 'custom:' > serverless.yml
        echo '  secret: ${env:HELLO}' >> serverless.yml
        echo '### Before replace ###'
        cat serverless.yml
    '''

    def val1 = 'hello'

    sh """
        set +x
        sed -i 's/\${env:HELLO}/${val1}/' ./serverless.yml
        echo '### After replace ###'
        cat serverless.yml
    """

 }

}

作业构建的输出

[script-pipeline-practice] Running shell script
+ set +x
### Before replace ###
custom:
  secret: ${env:HELLO}
[Pipeline] sh
[script-pipeline-practice] Running shell script
+ set +x
### After replace ###
custom:
  secret: hello