mschirrmeister/git2consul

docker-git2consul

本镜像为https://github.com/Cimpress-MCP/git2consul%E7%9A%84Docker%E9%95%9C%E5%83%8F%EF%BC%8C%E5%8C%85%E5%90%AB%E5%B0%91%E9%87%8F%E4%BF%AE%E6%94%B9%EF%BC%8C%E6%94%AF%E6%8C%81%E5%A4%9A%E7%A7%8D%E7%8E%AF%E5%A2%83%E5%8F%98%E9%87%8F%E9%85%8D%E7%BD%AE%EF%BC%8C%E6%97%A0%E9%9C%80%E7%BB%91%E5%AE%9A%E5%8D%B7%E5%88%B0%E5%AE%B9%E5%99%A8%E5%8D%B3%E5%8F%AF%E5%AE%8C%E6%88%90git2consul%E7%9A%84%E9%85%8D%E7%BD%AE%EF%BC%8C%E5%A4%A7%E5%B9%85%E7%AE%80%E5%8C%96%E5%AE%B9%E5%99%A8%E5%90%AF%E5%8A%A8%E6%B5%81%E7%A8%8B%E3%80%82

核心功能

• 将一个或多个Git仓库内容镜像到Consul键值存储（KV）
• 通过环境变量配置，避免卷绑定的繁琐操作
• 支持Consul安全连接、ACL令牌、SSH密钥等配置项

使用场景

• 微服务架构中，将Git存储的配置文件同步到Consul供服务读取
• 需要自动化同步Git配置到Consul的场景
• 简化git2consul的容器化部署流程

配置说明

支持以下环境变量：

• CONSUL_ENDPOINT：Consul端点地址
• CONSUL_PORT：Consul端口
• CONSUL_SECURE：是否使用HTTPS连接Consul（值为yes/no）
• TOKEN：Consul ACL令牌
• SSH_CLIENT_CONFIG：SSH客户端配置
• SSH_KEY：Base64编码的SSH私钥
• SSH_KEY_PUB：Base64编码的SSH公钥（可选）
• GIT2CONSUL_LOCAL_CONFIG：启动时提供的配置（替代配置文件）

部署示例

Docker原生部署

bash
CONSUL_IP=$(docker inspect --format '{{ .NetworkSettings.IPAddress }}' consul)

docker run \
  -it \
  --rm \
  --name git2consul \
  -e CONSUL_ENDPOINT=consul.service.consul.company.com \
  -e CONSUL_PORT='8501' \
  -e CONSUL_SECURE=yes \
  -e TOKEN=xxx \
  -e SSH_CLIENT_CONFIG='
StrictHostKeyChecking no
UserKnownHostsFile /dev/null
VerifyHostKeyDNS yes' \
  -e SSH_KEY='xxx' \
  -e SSH_KEY_PUB='xxx' \
  -e GIT2CONSUL_LOCAL_CONFIG='{
  "version": "1.0",
  "repos": [
      {
          "name" : "app1",
          "url" : "git@git.example.com:mygroup/myrepo.git",
          "branches" : ["master"],
          "include_branch_name": false,
          "source_root": "app1",
          "support_tags": false,
          "hooks": [
              {
                  "type" : "polling",
                  "interval" : "1"
              }
          ]
      }
  ]
}' \
  mschirrmeister/git2consul

Ansible Playbook部署

docker-git2consul.yml

yml
---
# 示例Playbook命令：ansible-playbook -i inventory docker-git2consul.yml

- hosts: docker-git2consul
  become: yes
  user: "{{ ansible_user | default('ansibledeploy') }}"

  vars:
      container_recreate: "{{ recreate | default('no') }}"
      consul_token: "xxx"
      ssh_private_key: "xxx"
      ssh_public_key: "xxx"
      
  tasks:
      - name: 安装依赖
        yum: pkg={{ item }}
        with_items:
          - python-docker-py
          - python-httplib2
        tags:
            - docker:git2consul
        register: pkg_installed

      - name: 运行git2consul容器
        docker_container:
            name: git2consul
            image: mschirrmeister/git2consul
            state: started
            recreate: "{{ container_recreate }}"
            env:
                CONSUL_ENDPOINT: "consul.service.consul.company.com"
                CONSUL_PORT: '8501'
                CONSUL_SECURE: yes
                TOKEN: "{{ consul_token }}"
                SSH_CLIENT_CONFIG: |
                  StrictHostKeyChecking no
                  UserKnownHostsFile /dev/null
                  VerifyHostKeyDNS yes
                SSH_KEY: "{{ ssh_private_key }}"
                SSH_KEY_PUB: "{{ ssh_public_key }}"
        tags:
            - docker:git2consul