JENKINS：在标记时使用来自 github 的 webhook 构建/标记 docker 图像以注册

Question

I have this pipeline in the root of my github project, with the Dockerfile:

pipeline {
  environment {
    def registry = 'registry/mydocker'
    def registryCredential = 'Docker'
    def dockerImage = ''
  }
  agent {
    kubernetes {
      yamlFile 'DockerPod.yaml'
    }
  }
  stages {
    stage('Slack Notification') {
      steps{
        slackSend (color: '#FFFF00', message: "STARTED: Job '${env.JOB_NAME} [${env.BUILD_NUMBER}]' (${env.BUILD_URL})")
      }
    }
    stage('Application Code Checkout from Git') {
      steps{
        node('master') {
          echo 'Pulling...' + env.GIT_BRANCH
          echo 'Pulling...' + env.VERSION
          echo 'Pulling...' + env.TAG_NAME
          checkout scm
        }
      }
    }
    stage('Building image') {
      steps{
        container('docker') {
          script {
            sh('test=${GIT_BRANCH##*/}')
            withCredentials([string(credentialsId: 'github_access_token', variable: 'TOKEN')]) {
              dockerImage = docker.build("${registry}:${test}","-f ./Dockerfile ./ --no-cache --build-arg VERSION=${test} --build-arg TOKEN=${TOKEN}")
            }
            docker.withRegistry('https://registry-1.docker.io/v2/', registryCredential) {
              dockerImage.push()
            }
          }
        }
      }
    }
  }
  post {
    success {
      slackSend (color: '#00FF00', message: "SUCCESSFUL: Job '${env.JOB_NAME} [${env.BUILD_NUMBER}]' (${env.BUILD_URL})")
    }
    failure {
      slackSend (color: '#FF0000', message: "FAILED: Job '${env.JOB_NAME} [${env.BUILD_NUMBER}]' (${env.BUILD_URL})")
    }
  }
}

My pipeline have this configuration:

refspecs == +refs/tags/*:refs/remotes/origin/tags/*

I don't understand the principe of "tag" with scm configuration.

My objective is: when a new tag is comming to github, a webhook execute this pipeline, and i generate the docker image with the same tag.

Answer 1

Here you should use Credential Plugin for Jenkins for storing your "registryCredential" variable. You should not write like this.

For Docker image build with the tag, you can use: docker build -t <service-name>:"$TAG_NAME" .