安装文档

说明

全新安装的 Linux
需要连接 互联网
使用 root 用户执行

可以使用由 华为云 提供的容器镜像服务 ❤

区域镜像仓库地址配置文件 /opt/jumpserver/config/config.txtKubernetes values.yaml
华北-北京一swr.cn-north-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-1.myhuaweicloud.comrepository: swr.cn-north-1.myhuaweicloud.com
华北-北京四swr.cn-north-4.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-4.myhuaweicloud.comrepository: swr.cn-north-4.myhuaweicloud.com
华南-广州swr.cn-south-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.comrepository: swr.cn-south-1.myhuaweicloud.com
华东-上海一swr.cn-east-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-east-3.myhuaweicloud.comrepository: swr.cn-east-3.myhuaweicloud.com
亚太-香港swr.ap-southeast-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-1.myhuaweicloud.comrepository: swr.ap-southeast-1.myhuaweicloud.com
亚太-新加坡swr.ap-southeast-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-3.myhuaweicloud.comrepository: swr.ap-southeast-3.myhuaweicloud.com

安装方式

外置环境要求

  • 推荐使用外置 数据库 和 Redis，方便日后扩展升级
DBVersionCacheVersion
MySQL>= 5.7Redis>= 5.0
MariaDB>= 10.2

一键部署

  1. # 默认会安装到 /opt/jumpserver-installer-v2.15.1 目录
  2. curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.15.1/quick_start.sh | bash
  3. cd /opt/jumpserver-installer-v2.15.1
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.15.1
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

手动部署

  1. cd /opt
  2. wget https://github.com/jumpserver/installer/releases/download/v2.15.1/jumpserver-installer-v2.15.1.tar.gz
  3. tar -xf jumpserver-installer-v2.15.1.tar.gz
  4. cd jumpserver-installer-v2.15.1
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  7. VOLUME_DIR=/opt/jumpserver
  8. DOCKER_DIR=/var/lib/docker
  9. SECRET_KEY=
  10. BOOTSTRAP_TOKEN=
  11. LOG_LEVEL=ERROR
  13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  14. USE_EXTERNAL_MYSQL=0
  15. DB_HOST=mysql
  16. DB_PORT=3306
  17. DB_USER=root
  18. DB_PASSWORD=
  19. DB_NAME=jumpserver
  21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  22. USE_EXTERNAL_REDIS=0
  23. REDIS_HOST=redis
  24. REDIS_PORT=6379
  25. REDIS_PASSWORD=
  27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  28. COMPOSE_PROJECT_NAME=jms
  29. COMPOSE_HTTP_TIMEOUT=3600
  30. DOCKER_CLIENT_TIMEOUT=3600
  31. DOCKER_SUBNET=192.168.250.0/24
  33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  34. USE_IPV6=0
  35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  38. HTTP_PORT=80
  39. SSH_PORT=2222
  40. RDP_PORT=3389
  42. USE_LB=0
  43. HTTPS_PORT=443
  45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  46. USE_TASK=1
  48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  49. USE_XPACK=0
  51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  52. # SESSION_COOKIE_AGE=86400
  53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  55. # Koko Lion XRDP 组件配置
  56. CORE_HOST=http://core:8080
  58. # 额外的配置
  59. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.15.1
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

离线部署(amd64)

从飞致云社区 下载最新的 linux/amd64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.15.1-amd64-82.tar.gz
  3. cd jumpserver-offline-installer-v2.15.1-amd64-82
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  7. VOLUME_DIR=/opt/jumpserver
  8. DOCKER_DIR=/var/lib/docker
  9. SECRET_KEY=
  10. BOOTSTRAP_TOKEN=
  11. LOG_LEVEL=ERROR
  13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  14. USE_EXTERNAL_MYSQL=0
  15. DB_HOST=mysql
  16. DB_PORT=3306
  17. DB_USER=root
  18. DB_PASSWORD=
  19. DB_NAME=jumpserver
  21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  22. USE_EXTERNAL_REDIS=0
  23. REDIS_HOST=redis
  24. REDIS_PORT=6379
  25. REDIS_PASSWORD=
  27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  28. COMPOSE_PROJECT_NAME=jms
  29. COMPOSE_HTTP_TIMEOUT=3600
  30. DOCKER_CLIENT_TIMEOUT=3600
  31. DOCKER_SUBNET=192.168.250.0/24
  33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  34. USE_IPV6=0
  35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  38. HTTP_PORT=80
  39. SSH_PORT=2222
  40. RDP_PORT=3389
  42. USE_LB=0
  43. HTTPS_PORT=443
  45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  46. USE_TASK=1
  48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  49. USE_XPACK=0
  51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  52. # SESSION_COOKIE_AGE=86400
  53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  55. # Koko Lion XRDP 组件配置
  56. CORE_HOST=http://core:8080
  58. # 额外的配置
  59. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.15.1
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

离线部署(arm64)

从飞致云社区 下载最新的 linux/arm64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.15.1-arm64-74.tar.gz
  3. cd jumpserver-offline-installer-v2.15.1-arm64-74
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  7. VOLUME_DIR=/opt/jumpserver
  8. DOCKER_DIR=/var/lib/docker
  9. SECRET_KEY=
  10. BOOTSTRAP_TOKEN=
  11. LOG_LEVEL=ERROR
  13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  14. USE_EXTERNAL_MYSQL=0
  15. DB_HOST=mysql
  16. DB_PORT=3306
  17. DB_USER=root
  18. DB_PASSWORD=
  19. DB_NAME=jumpserver
  21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  22. USE_EXTERNAL_REDIS=0
  23. REDIS_HOST=redis
  24. REDIS_PORT=6379
  25. REDIS_PASSWORD=
  27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  28. COMPOSE_PROJECT_NAME=jms
  29. COMPOSE_HTTP_TIMEOUT=3600
  30. DOCKER_CLIENT_TIMEOUT=3600
  31. DOCKER_SUBNET=192.168.250.0/24
  33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  34. USE_IPV6=0
  35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  38. HTTP_PORT=80
  39. SSH_PORT=2222
  40. RDP_PORT=3389
  42. USE_LB=0
  43. HTTPS_PORT=443
  45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  46. USE_TASK=1
  48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  49. USE_XPACK=0
  51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  52. # SESSION_COOKIE_AGE=86400
  53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  55. # Koko Lion XRDP 组件配置
  56. CORE_HOST=http://core:8080
  58. # 额外的配置
  59. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.15.1
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

Kubernetes

  1. cd /opt
  2. git clone https://github.com/jumpserver/helm
  3. cd /opt/helm
  4. cat values.yaml
  1. # Default values for jumpserver.
  2. # This is a YAML-formatted file.
  3. # Declare variables to be passed into your templates.
  5. nameOverride: ""
  6. fullnameOverride: ""
  8. ## @param global.imageRegistry Global Docker image registry
  9. ## @param global.imagePullSecrets Global Docker registry secret names as an array
  10. ## @param global.storageClass Global StorageClass for Persistent Volume(s)
  11. ## @param global.redis.password Global Redis™ password (overrides `auth.password`)
  12. ##
  13. global:
  14.   imageRegistry: "docker.io"    # 国内可以使用华为云加速
  15.   ## E.g.
  16.   #  imagePullSecrets:
  17.   #  - myRegistryKeySecretName
  18.   ##
  19.   imagePullSecrets: []
  20.   storageClass: ""              # NFS SC
  22. ## If the Redis database included in the chart is disabled, JumpServer will
  23. ## use below parameters to connect to an external Redis server.
  24. ##
  25. externalDatabase:               # 数据库相关设置
  26.   engine: mysql
  27.   host: localhost
  28.   port: 3306
  29.   user: root
  30.   password: ""
  31.   database: jumpserver
  33. ## If the MySQL database included in the chart is disabled, JumpServer will
  34. ## use below parameters to connect to an external MySQL server.
  35. ##
  36. externalRedis:                  # Redis 设置
  37.   host: localhost
  38.   port: 6379
  39.   password: ""
  41. serviceAccount:
  42.   # Specifies whether a service account should be created
  43.   create: false
  44.   # The name of the service account to use.
  45.   # If not set and create is true, a name is generated using the fullname template
  46.   name:
  48. ingress:
  49.   enabled: true
  50.   annotations:
  51.     # kubernetes.io/tls-acme: "true"
  52.     compute-full-forwarded-for: "true"
  53.     use-forwarded-headers: "true"
  54.     kubernetes.io/ingress.class: nginx
  55.     nginx.ingress.kubernetes.io/configuration-snippet: |
  56.        proxy_set_header Upgrade "websocket";
  57.        proxy_set_header Connection "Upgrade";
  58.   hosts:
  59.     - "test.jumpserver.org"                 # 对外域名
  60.   tls: []
  61.   #  - secretName: chart-example-tls
  62.   #    hosts:
  63.   #      - chart-example.local
  65. core:
  66.   enabled: true
  68.   labels:
  69.     app.jumpserver.org/name: jms-core
  71.   config:
  72.     # Generate a new random secret key by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
  73.     secretKey: ""
  74.     # Generate a new random bootstrap token by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
  75.     bootstrapToken: ""
  76.     # Enabled it for debug
  77.     debug: false
  78.     log:
  79.       level: ERROR
  81.   replicaCount: 1
  83.   image:
  84.     registry: docker.io
  85.     repository: jumpserver/core
  86.     tag: v2.13.2
  87.     pullPolicy: IfNotPresent
  89.   command: []
  91.   env: []
  93.   livenessProbe:
  94.     failureThreshold: 30
  95.     httpGet:
  96.       path: /api/health/
  97.       port: web
  99.   readinessProbe:
  100.     failureThreshold: 30
  101.     httpGet:
  102.       path: /api/health/
  103.       port: web
  105.   podSecurityContext: {}
  106.     # fsGroup: 2000
  108.   securityContext: {}
  109.     # capabilities:
  110.     #   drop:
  111.     #   - ALL
  112.     # readOnlyRootFilesystem: true
  113.     # runAsNonRoot: true
  114.     # runAsUser: 1000
  116.   service:
  117.     type: ClusterIP
  118.     web:
  119.       port: 8080
  120.     ws:
  121.       port: 8070
  123.   resources: {}
  124.     # We usually recommend not to specify default resources and to leave this as a conscious
  125.     # choice for the user. This also increases chances charts run on environments with little
  126.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  127.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  128.     # limits:
  129.     #   cpu: 1000m
  130.     #   memory: 2048Mi
  131.     # requests:
  132.     #   cpu: 500m
  133.     #   memory: 1024Mi
  135.   persistence:
  136.     storageClassName: jumpserver-data
  137.     accessModes:
  138.       - ReadWriteMany
  139.     size: 10Gi
  140.     # annotations: {}
  141.     finalizers:
  142.       - kubernetes.io/pvc-protection
  143.     # subPath: ""
  144.     # existingClaim:
  146.   volumeMounts: []
  148.   volumes: []
  150.   nodeSelector: {}
  152.   tolerations: []
  154.   affinity: {}
  156. koko:
  157.   enabled: true
  159.   labels:
  160.     app.jumpserver.org/name: jms-koko
  162.   config:
  163.     log:
  164.       level: ERROR
  166.   replicaCount: 1
  168.   image:
  169.     registry: docker.io
  170.     repository: jumpserver/koko
  171.     tag: v2.13.2
  172.     pullPolicy: IfNotPresent
  174.   command: []
  176.   env: []
  178.   livenessProbe:
  179.     failureThreshold: 30
  180.     httpGet:
  181.       path: /koko/health/
  182.       port: web
  184.   readinessProbe:
  185.     failureThreshold: 30
  186.     httpGet:
  187.       path: /koko/health/
  188.       port: web
  190.   podSecurityContext: {}
  191.     # fsGroup: 2000
  193.   securityContext:
  194.     privileged: true
  195.     # capabilities:
  196.     #   drop:
  197.     #   - ALL
  198.     # readOnlyRootFilesystem: true
  199.     # runAsNonRoot: true
  200.     # runAsUser: 1000
  202.   service:
  203.     type: ClusterIP
  204.     web:
  205.       port: 5000
  206.     ssh:
  207.       port: 2222
  209.   resources: {}
  210.     # We usually recommend not to specify default resources and to leave this as a conscious
  211.     # choice for the user. This also increases chances charts run on environments with little
  212.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  213.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  214.     # limits:
  215.     #   cpu: 100m
  216.     #   memory: 128Mi
  217.     # requests:
  218.     #   cpu: 100m
  219.     #   memory: 128Mi
  221.   persistence:
  222.     storageClassName: jumpserver-data
  223.     accessModes:
  224.       - ReadWriteMany
  225.     size: 10Gi
  226.     # annotations: {}
  227.     finalizers:
  228.       - kubernetes.io/pvc-protection
  230.   volumeMounts: []
  232.   volumes: []
  234.   nodeSelector: {}
  236.   tolerations: []
  238.   affinity: {}
  240. lion:
  241.   enabled: true
  243.   labels:
  244.     app.jumpserver.org/name: jms-lion
  246.   config:
  247.     log:
  248.       level: ERROR
  250.   replicaCount: 1
  252.   image:
  253.     registry: docker.io
  254.     repository: jumpserver/lion
  255.     tag: v2.13.2
  256.     pullPolicy: IfNotPresent
  258.   command: []
  260.   env: []
  262.   livenessProbe:
  263.     failureThreshold: 30
  264.     httpGet:
  265.       path: /lion/health/
  266.       port: web
  268.   readinessProbe:
  269.     failureThreshold: 30
  270.     httpGet:
  271.       path: /lion/health/
  272.       port: web
  274.   podSecurityContext: {}
  275.     # fsGroup: 2000
  277.   securityContext: {}
  278.     # capabilities:
  279.     #   drop:
  280.     #   - ALL
  281.     # readOnlyRootFilesystem: true
  282.     # runAsNonRoot: true
  283.     # runAsUser: 1000
  285.   service:
  286.     type: ClusterIP
  287.     web:
  288.       port: 8081
  290.   resources: {}
  291.     # We usually recommend not to specify default resources and to leave this as a conscious
  292.     # choice for the user. This also increases chances charts run on environments with little
  293.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  294.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  295.     # limits:
  296.     #   cpu: 100m
  297.     #   memory: 512Mi
  298.     # requests:
  299.     #   cpu: 100m
  300.     #   memory: 512Mi
  302.   persistence:
  303.     storageClassName: jumpserver-data
  304.     accessModes:
  305.       - ReadWriteMany
  306.     size: 10Gi
  307.     # annotations: {}
  308.     finalizers:
  309.       - kubernetes.io/pvc-protection
  311.   volumeMounts: []
  313.   volumes: []
  315.   nodeSelector: {}
  317.   tolerations: []
  319.   affinity: {}
  321. xpack:
  322.   enabled: false      # 企业版本打开此选项
  324. omnidb:
  325.   labels:
  326.     app.jumpserver.org/name: jms-omnidb
  328.   config:
  329.     log:
  330.       level: ERROR
  332.   replicaCount: 1
  334.   image:
  335.     registry: registry.fit2cloud.com
  336.     repository: jumpserver/omnidb
  337.     tag: v2.13.2
  338.     pullPolicy: IfNotPresent
  340.   command: []
  342.   env: []
  344.   livenessProbe:
  345.     failureThreshold: 30
  346.     tcpSocket:
  347.       port: web
  349.   readinessProbe:
  350.     failureThreshold: 30
  351.     tcpSocket:
  352.       port: web
  354.   podSecurityContext: {}
  355.     # fsGroup: 2000
  357.   securityContext: {}
  358.     # capabilities:
  359.     #   drop:
  360.     #   - ALL
  361.     # readOnlyRootFilesystem: true
  362.     # runAsNonRoot: true
  363.     # runAsUser: 1000
  365.   service:
  366.     type: ClusterIP
  367.     web:
  368.       port: 8082
  369.     ws:
  370.       port: 8071
  372.   resources: {}
  373.     # We usually recommend not to specify default resources and to leave this as a conscious
  374.     # choice for the user. This also increases chances charts run on environments with little
  375.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  376.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  377.     # limits:
  378.     #   cpu: 100m
  379.     #   memory: 128Mi
  380.     # requests:
  381.     #   cpu: 100m
  382.     #   memory: 128Mi
  384.   persistence:
  385.     storageClassName: jumpserver-data
  386.     accessModes:
  387.       - ReadWriteMany
  388.     size: 10Gi
  389.     # annotations: {}
  390.     finalizers:
  391.       - kubernetes.io/pvc-protection
  393.   volumeMounts: []
  395.   volumes: []
  397.   nodeSelector: {}
  399.   tolerations: []
  401.   affinity: {}
  403. xrdp:
  404.   labels:
  405.     app.jumpserver.org/name: jms-xrdp
  407.   config:
  408.     log:
  409.       level: ERROR
  411.   replicaCount: 1
  413.   image:
  414.     registry: registry.fit2cloud.com
  415.     repository: jumpserver/xrdp
  416.     tag: v2.13.2
  417.     pullPolicy: IfNotPresent
  419.   command: []
  421.   env: []
  423.   livenessProbe:
  424.     failureThreshold: 30
  425.     tcpSocket:
  426.       port: rdp
  428.   readinessProbe:
  429.     failureThreshold: 30
  430.     tcpSocket:
  431.       port: rdp
  433.   podSecurityContext: {}
  434.     # fsGroup: 2000
  436.   securityContext: {}
  437.     # capabilities:
  438.     #   drop:
  439.     #   - ALL
  440.     # readOnlyRootFilesystem: true
  441.     # runAsNonRoot: true
  442.     # runAsUser: 1000
  444.   service:
  445.     type: ClusterIP
  446.     rdp:
  447.       port: 3389
  449.   resources: {}
  450.     # We usually recommend not to specify default resources and to leave this as a conscious
  451.     # choice for the user. This also increases chances charts run on environments with little
  452.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  453.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  454.     # limits:
  455.     #   cpu: 100m
  456.     #   memory: 128Mi
  457.     # requests:
  458.     #   cpu: 100m
  459.     #   memory: 128Mi
  461.   persistence:
  462.     storageClassName: jumpserver-data
  463.     accessModes:
  464.       - ReadWriteMany
  465.     size: 10Gi
  466.     # annotations: {}
  467.     finalizers:
  468.       - kubernetes.io/pvc-protection
  470.   volumeMounts: []
  472.   volumes: []
  474.   nodeSelector: {}
  476.   tolerations: []
  478.   affinity: {}
  480. web:
  481.   enabled: true
  483.   labels:
  484.     app.jumpserver.org/name: jms-web
  486.   replicaCount: 1
  488.   image:
  489.     registry: docker.io
  490.     repository: jumpserver/web
  491.     tag: v2.13.2
  492.     pullPolicy: IfNotPresent
  494.   command: []
  496.   env: []
  498.   livenessProbe:
  499.     failureThreshold: 30
  500.     httpGet:
  501.       path: /api/health/
  502.       port: web
  504.   readinessProbe:
  505.     failureThreshold: 30
  506.     httpGet:
  507.       path: /api/health/
  508.       port: web
  510.   podSecurityContext: {}
  511.     # fsGroup: 2000
  513.   securityContext: {}
  514.     # capabilities:
  515.     #   drop:
  516.     #   - ALL
  517.     # readOnlyRootFilesystem: true
  518.     # runAsNonRoot: true
  519.     # runAsUser: 1000
  521.   service:
  522.     type: ClusterIP
  523.     web:
  524.       port: 80
  526.   resources: {}
  527.     # We usually recommend not to specify default resources and to leave this as a conscious
  528.     # choice for the user. This also increases chances charts run on environments with little
  529.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  530.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  531.     # limits:
  532.     #   cpu: 100m
  533.     #   memory: 128Mi
  534.     # requests:
  535.     #   cpu: 100m
  536.     #   memory: 128Mi
  538.   persistence:
  539.     storageClassName: jumpserver-data
  540.     accessModes:
  541.       - ReadWriteMany
  542.     size: 1Gi
  543.     # annotations: {}
  544.     finalizers:
  545.       - kubernetes.io/pvc-protection
  547.   volumeMounts: []
  549.   volumes: []
  551.   nodeSelector: {}
  553.   tolerations: []
  555.   affinity: {}
  1. # 安装
  2. helm install jumpserver ./ -n default
  4. # 卸载
  5. helm uninstall jumpserver -n default
  7. # 查看
  8. helm list -n default

源码部署

Allinone

后续的使用请参考 安全建议 快速入门