如何让Azure DevOps流水线在AKS Pod异常时失败？验证任务遇报错

我在使用Azure DevOps将服务部署到AKS集群时遇到问题：即使Pod处于崩溃未启动状态，流水线仍显示执行成功。为了验证Pod状态，我添加了以下部署和验证任务：

- task: Kubernetes@1
  displayName: 'Deploy ${{ parameters.project_display_name }} to ${{ parameters.cluster }}'
  inputs:
    connectionType: Kubernetes Service Connection
    kubernetesServiceEndpoint: ${{ parameters.cluster }}-${{ parameters.namespace }}
    command: apply
    arguments: -f $(System.ArtifactsDirectory)/k8_manifest/manifest.yml -n ${{ parameters.namespace }}
    outputFormat: 'yaml'

- task: AzureCLI@2
  displayName: 'Validate Deployment of ${{ parameters.project_display_name }} to ${{ parameters.cluster }}'
  inputs:
    scriptType: 'pscore'
    scriptLocation: 'inlineScript'
    inlineScript: |
      containerStatuses=$(kubectl get deployment loss-limit-api --namespace betting -o=jsonpath='{$.status.conditions}')
      for row in $(echo "${containerStatuses}" | jq -r '.[] | @base64'); do
          _jq() {
          echo ${row} | base64 --decode | jq -r ${1}
          }
          if [ $(_jq '.status') != "True" ]; then
              echo "Inactive Pod error on the deployment"
              exit 1
          fi
      done

但执行验证任务时返回如下错误：

Starting: Validate Deployment of Loss Limit API to core-dev00
==============================================================================
Task         : Azure CLI
Description  : Run Azure CLI commands against an Azure subscription in a PowerShell Core/Shell script when running on Linux agent or PowerShell/PowerShell Core/Batch script when running on Windows agent.
Version      : 2.208.0
Author       : Microsoft Corporation
Help         : https://docs.microsoft.com/azure/devops/pipelines/tasks/deploy/azure-cli
==============================================================================
##[error]Script failed with error: Error: Unable to locate executable file: 'pwsh'. Please verify either the file path exists or the file can be found within a directory specified by the PATH environment variable. Also check the file mode to verify the file is executable.
Finishing: Validate Deployment of Loss Limit API to core-dev00

错误原因 #

任务配置中指定了scriptType: 'pscore'（即使用PowerShell Core），但运行流水线的代理机器上没有安装PowerShell Core，或者pwsh可执行文件不在系统的PATH环境变量中，导致系统无法找到该命令。

解决方法 #

方法1：切换为Shell脚本类型（推荐，适用于Linux代理）

你的验证脚本本身是Shell语法，直接将scriptType改为bash即可适配大多数Linux代理环境，无需额外安装依赖：

- task: AzureCLI@2
  displayName: 'Validate Deployment of ${{ parameters.project_display_name }} to ${{ parameters.cluster }}'
  inputs:
    scriptType: 'bash'
    scriptLocation: 'inlineScript'
    inlineScript: |
      containerStatuses=$(kubectl get deployment loss-limit-api --namespace betting -o=jsonpath='{$.status.conditions}')
      for row in $(echo "${containerStatuses}" | jq -r '.[] | @base64'); do
          _jq() {
          echo ${row} | base64 --decode | jq -r ${1}
          }
          if [ $(_jq '.status') != "True" ]; then
              echo "Inactive Pod error on the deployment"
              exit 1
          fi
      done

方法2：在代理上安装PowerShell Core

如果必须使用PowerShell Core，需要在运行流水线的代理机器上安装PowerShell Core，确保pwsh命令能被系统找到。也可以在流水线中添加前置安装步骤，自动完成PowerShell Core的安装。

额外优化建议 #

为了让验证逻辑更健壮，建议添加部署等待逻辑，避免在部署未完成时就执行验证，同时直接检查Pod的运行状态：

# 等待Deployment完成滚动更新，超时时间5分钟
kubectl rollout status deployment/loss-limit-api -n betting --timeout=5m

# 检查所有关联Pod是否处于Running状态
pod_phases=$(kubectl get pods -n betting -l app=loss-limit-api -o jsonpath='{.items[*].status.phase}')
if [[ ! "$pod_phases" =~ "Running" ]]; then
    echo "部分Pod未处于Running状态"
    exit 1
fi

内容的提问来源于stack exchange，提问作者Luis Louis