┌─────────────────────────────────────────────────────────────────┐
│                    Jenkins Controller                            │
│                                                                  │
│   ┌─────────────────────────────────────────────────────────┐   │
│   │  调度器 (Scheduler)                                      │   │
│   │  • 接收构建请求                                           │   │
│   │  • 选择合适的节点                                          │   │
│   │  • 分配 Executor                                          │   │
│   └─────────────────────────────────────────────────────────┘   │
└─────────────────────────────────────────────────────────────────┘
                ↓                               ↓
        ┌───────────────┐               ┌───────────────┐
        │   Linux Node   │               │ Windows Node   │
        │  Executor: 4   │               │  Executor: 2   │
        │  Label: docker │               │  Label: .net   │
        └───────────────┘               └───────────────┘
                ↓
        ┌───────────────┐
        │ macOS Node     │
        │  Executor: 2   │
        │  Label: ios    │
        └───────────────┘

系统管理 → 节点管理 → 新建节点 → 永久节点

凭据 → 系统 → 全局凭据 → 添加凭据

# 1. 创建 jenkins 用户
sudo useradd -m -s /bin/bash jenkins
sudo passwd jenkins

# 2. 配置 sudo 权限（可选）
sudo visudo
# 添加: jenkins ALL=(ALL) NOPASSWD: ALL

# 3. 配置 SSH
sudo su - jenkins
mkdir -p ~/.ssh
chmod 700 ~/.ssh

# 4. 生成 SSH 密钥对
ssh-keygen -t ed25519 -C "jenkins@controller"

# 5. 授权公钥
cat ~/.ssh/id_ed25519.pub >> ~/.ssh/authorized_keys
chmod 600 ~/.ssh/authorized_keys

# 6. 安装必要工具
sudo apt install -y openjdk-11-jdk docker.io maven git
# 或
sudo yum install -y java-11-openjdk docker maven git

# 使用 Chocolatey 安装 OpenSSH
choco install openssh -y

# 配置服务
Start-Service sshd
Set-Service -Name sshd -StartupType Automatic

系统管理 → 系统配置 → 云计算 → 添加新的云 → Kubernetes

# Pod 模板配置
---
name: jenkins-agent
namespace: jenkins
label: jenkins-agent
containers:
- name: jnlp
  image: jenkins/inbound-agent:latest-jdk11
  imagePullPolicy: IfNotPresent
  workingDir: /home/jenkins/agent
  ttyEnabled: true
  resourceRequestCpu: 500m
  resourceLimitCpu: 1000m
  resourceRequestMemory: 512Mi
  resourceLimitMemory: 1Gi
  envVars:
  - envVar:
      key: JENKINS_URL
      value: http://jenkins:8080
- name: maven
  image: maven:3.8-openjdk-11
  command: sleep
  args: infinity
  resourceRequestCpu: 1000m
  resourceLimitCpu: 2000m
  resourceRequestMemory: 1Gi
  resourceLimitMemory: 2Gi
- name: docker
  image: docker:20.10-dind
  securityContext:
    privileged: true
  volumeMounts:
  - name: docker-graph-storage
    mountPath: /var/lib/docker
volumes:
- name: docker-graph-storage
  emptyDir: {}
yamlMergeStrategy:
  override

pipeline {
    agent {
        kubernetes {
            label 'java-build'
            defaultContainer 'jnlp'
            yaml '''
apiVersion: v1
kind: Pod
metadata:
  name: jenkins-agent
spec:
  containers:
  - name: jnlp
    image: jenkins/inbound-agent:latest-jdk11
  - name: maven
    image: maven:3.8-openjdk-11
    command: sleep
    args: infinity
    resources:
      requests:
        memory: "1Gi"
        cpu: "500m"
      limits:
        memory: "2Gi"
        cpu: "1000m"
  restartPolicy: Never
'''
        }
    }
    
    stages {
        stage('Build') {
            steps {
                container('maven') {
                    sh 'mvn clean package'
                }
            }
        }
    }
}

系统管理 → 插件管理 → 搜索 "Docker"

系统管理 → 系统配置 → 云计算 → 添加新的云 → Docker

// Pipeline 中指定节点
pipeline {
    agent {
        node {
            label 'docker && linux'
            customWorkspace '/opt/jenkins/custom-workspace'
        }
    }
}

// 仅在标签节点执行
agent { label 'windows' }

// 任意可用节点
agent any

# Web 界面配置
标签: "docker,linux,maven,ubuntu-20.04"

// Pipeline 使用标签组
agent { label 'docker' }
agent { label 'linux && maven' }
agent { label 'docker || windows' }

系统管理 → 节点管理 → [节点名称]

# 检查 SSH 连接
ssh -v jenkins@agent-host

# 检查 Java 安装
java -version

# 检查端口连通性
telnet jenkins-host 50000

// Pipeline 中清理
post {
    always {
        cleanWs()
        sh 'docker system prune -af'
    }
}