实战 Runbook：MySQL + Go + Vue 全链路 CI/CD 真实发布

# Harbor 建公开项目 bootcamp（公开 → 节点 containerd 拉镜像免 imagePullSecret）
curl -u admin:bootcamp -X POST http://10.0.24.31:30002/api/v2.0/projects \
  -H "Content-Type: application/json" -d '{"project_name":"bootcamp","public":true}'

# Gitea 建两个 repo
for r in demo-app demo-deploy; do
  curl -u bootcamp:bootcamp -X POST http://10.0.24.31:30022/api/v1/user/repos \
    -H "Content-Type: application/json" \
    -d "{\"name\":\"$r\",\"private\":false,\"default_branch\":\"main\",\"auto_init\":false}"
done

# 推代码（git 内嵌 http 凭据）
cd demo-app    && git init -b main && git add -A && git commit -m init && \
  git remote add origin http://bootcamp:bootcamp@10.0.24.31:30022/bootcamp/demo-app.git && git push -u origin main
cd demo-deploy && git init -b main && git add -A && git commit -m init && \
  git remote add origin http://bootcamp:bootcamp@10.0.24.31:30022/bootcamp/demo-deploy.git && git push -u origin main

kubectl create secret docker-registry harbor-auth -n jenkins \
  --docker-server=10.0.24.28:30002 --docker-username=admin --docker-password=bootcamp

J=http://10.0.24.31:30808; AUTH="admin:bootcamp"
# config.xml: flow-definition + CpsScmFlowDefinition + GitSCM(url=...demo-app.git, */main, scriptPath=Jenkinsfile)
CRUMB=$(curl -s -c /tmp/jc -u "$AUTH" "$J/crumbIssuer/api/json" | jq -r .crumb)
curl -s -b /tmp/jc -u "$AUTH" -H "Jenkins-Crumb:$CRUMB" -H "Content-Type:application/xml" \
  --data-binary @config.xml "$J/createItem?name=demo-app"
curl -s -b /tmp/jc -u "$AUTH" -H "Jenkins-Crumb:$CRUMB" -X POST "$J/job/demo-app/build"   # 触发构建

# Harbor 有镜像
curl -s -u admin:bootcamp http://10.0.24.31:30002/api/v2.0/projects/bootcamp/repositories | grep -o '"name":"[^"]*"'
# "bootcamp/frontend"  "bootcamp/backend"

# 部署 repo 的 image tag 已被 CI 改写
curl -s -u bootcamp:bootcamp http://10.0.24.31:30022/bootcamp/demo-deploy/raw/branch/main/manifests/03-backend.yaml | grep image:
#   image: 10.0.24.28:30002/bootcamp/backend:2

F=http://10.0.24.31:31000
curl -s $F/ | grep -o '<title>[^<]*</title>'          # <title>Demo CI/CD</title>
curl -s $F/api/info                                    # {"app":"demo-backend","version":"1.0.0"}
curl -s -X POST $F/api/items -H 'Content-Type: application/json' -d '{"name":"第一条-CICD跑通"}'   # {"id":1,...}
curl -s $F/api/items                                   # 返回写入的条目（经 nginx→backend→MySQL）

kubectl delete pod -n demo -l app=mysql              # 新 Pod 会重挂同一个 Longhorn 卷
kubectl wait -n demo --for=condition=Ready pod -l app=mysql --timeout=180s
curl -s $F/api/items                                  # 还是那三条，id/时间戳不变 ✓

# 1) 改源码并 push
sed -i 's/const version = "1.0.0"/const version = "2.0.0"/' backend/main.go
git commit -am "feat: 后端 2.0.0" && git push origin main
# 2) 触发 Jenkins 构建 #3 → backend:3/frontend:3 → 部署 repo tag 改成 :3
# 3) ArgoCD 自动检测并滚动升级

curl -s $F/api/info     # {"app":"demo-backend","version":"2.0.0"}  ← 升级成功
curl -s $F/api/items    # 三条数据仍在 ← 跨版本升级数据不丢