安装文档

说明

全新安装的 Linux(内核推荐大于 4.0)
需要连接 互联网
使用 root 用户执行

可以使用由 华为云 提供的容器镜像服务 ❤

区域镜像仓库地址配置文件 /opt/jumpserver/config/config.txtKubernetes values.yaml
华北-北京一swr.cn-north-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-1.myhuaweicloud.comrepository: swr.cn-north-1.myhuaweicloud.com
华北-北京四swr.cn-north-4.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-4.myhuaweicloud.comrepository: swr.cn-north-4.myhuaweicloud.com
华南-广州swr.cn-south-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.comrepository: swr.cn-south-1.myhuaweicloud.com
华东-上海一swr.cn-east-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-east-3.myhuaweicloud.comrepository: swr.cn-east-3.myhuaweicloud.com
亚太-香港swr.ap-southeast-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-1.myhuaweicloud.comrepository: swr.ap-southeast-1.myhuaweicloud.com
亚太-新加坡swr.ap-southeast-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-3.myhuaweicloud.comrepository: swr.ap-southeast-3.myhuaweicloud.com

安装方式

外置环境要求

  • 推荐使用外置 数据库 和 Redis,方便日后扩展升级
DBVersionCacheVersion
MySQL>= 5.7Redis>= 5.0
MariaDB>= 10.2

一键部署

  1. # 默认会安装到 /opt/jumpserver-installer-v2.18.2 目录
  2. curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.18.2/quick_start.sh | bash
  3. cd /opt/jumpserver-installer-v2.18.2
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.18.2
  2. # 启动
  3. ./jmsctl.sh start
  4. # 停止
  5. ./jmsctl.sh down
  6. # 卸载
  7. ./jmsctl.sh uninstall
  8. # 帮助
  9. ./jmsctl.sh -h

手动部署

  1. cd /opt
  2. wget https://github.com/jumpserver/installer/releases/download/v2.18.2/jumpserver-installer-v2.18.2.tar.gz
  3. tar -xf jumpserver-installer-v2.18.2.tar.gz
  4. cd jumpserver-installer-v2.18.2
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  4. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  5. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. VOLUME_DIR=/opt/jumpserver
  7. DOCKER_DIR=/var/lib/docker
  8. SECRET_KEY=
  9. BOOTSTRAP_TOKEN=
  10. LOG_LEVEL=ERROR
  11. ## MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  12. USE_EXTERNAL_MYSQL=0
  13. DB_HOST=mysql
  14. DB_PORT=3306
  15. DB_USER=root
  16. DB_PASSWORD=
  17. DB_NAME=jumpserver
  18. ## Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  19. USE_EXTERNAL_REDIS=0
  20. REDIS_HOST=redis
  21. REDIS_PORT=6379
  22. REDIS_PASSWORD=
  23. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  24. COMPOSE_PROJECT_NAME=jms
  25. COMPOSE_HTTP_TIMEOUT=3600
  26. DOCKER_CLIENT_TIMEOUT=3600
  27. DOCKER_SUBNET=192.168.250.0/24
  28. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  29. USE_IPV6=0
  30. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  31. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  32. HTTP_PORT=80
  33. SSH_PORT=2222
  34. RDP_PORT=3389
  35. USE_LB=0
  36. HTTPS_PORT=443
  37. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  38. USE_TASK=1
  39. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  40. USE_XPACK=0
  41. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  42. # SESSION_COOKIE_AGE=86400
  43. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  44. # Koko Lion XRDP 组件配置
  45. CORE_HOST=http://core:8080
  46. # 额外的配置
  47. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  3. # 启动
  4. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.18.2
  2. # 启动
  3. ./jmsctl.sh start
  4. # 停止
  5. ./jmsctl.sh down
  6. # 卸载
  7. ./jmsctl.sh uninstall
  8. # 帮助
  9. ./jmsctl.sh -h

离线部署(amd64)

从飞致云社区 下载最新的 linux/amd64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.18.2-amd64-114.tar.gz
  3. cd jumpserver-offline-installer-v2.18.2-amd64-114
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  4. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  5. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. VOLUME_DIR=/opt/jumpserver
  7. DOCKER_DIR=/var/lib/docker
  8. SECRET_KEY=
  9. BOOTSTRAP_TOKEN=
  10. LOG_LEVEL=ERROR
  11. ## MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  12. USE_EXTERNAL_MYSQL=0
  13. DB_HOST=mysql
  14. DB_PORT=3306
  15. DB_USER=root
  16. DB_PASSWORD=
  17. DB_NAME=jumpserver
  18. ## Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  19. USE_EXTERNAL_REDIS=0
  20. REDIS_HOST=redis
  21. REDIS_PORT=6379
  22. REDIS_PASSWORD=
  23. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  24. COMPOSE_PROJECT_NAME=jms
  25. COMPOSE_HTTP_TIMEOUT=3600
  26. DOCKER_CLIENT_TIMEOUT=3600
  27. DOCKER_SUBNET=192.168.250.0/24
  28. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  29. USE_IPV6=0
  30. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  31. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  32. HTTP_PORT=80
  33. SSH_PORT=2222
  34. RDP_PORT=3389
  35. USE_LB=0
  36. HTTPS_PORT=443
  37. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  38. USE_TASK=1
  39. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  40. USE_XPACK=0
  41. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  42. # SESSION_COOKIE_AGE=86400
  43. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  44. # Koko Lion XRDP 组件配置
  45. CORE_HOST=http://core:8080
  46. # 额外的配置
  47. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  3. # 启动
  4. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.18.2
  2. # 启动
  3. ./jmsctl.sh start
  4. # 停止
  5. ./jmsctl.sh down
  6. # 卸载
  7. ./jmsctl.sh uninstall
  8. # 帮助
  9. ./jmsctl.sh -h

离线部署(arm64)

从飞致云社区 下载最新的 linux/arm64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.18.2-arm64-114.tar.gz
  3. cd jumpserver-offline-installer-v2.18.2-arm64-114
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  4. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  5. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. VOLUME_DIR=/opt/jumpserver
  7. DOCKER_DIR=/var/lib/docker
  8. SECRET_KEY=
  9. BOOTSTRAP_TOKEN=
  10. LOG_LEVEL=ERROR
  11. ## MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  12. USE_EXTERNAL_MYSQL=0
  13. DB_HOST=mysql
  14. DB_PORT=3306
  15. DB_USER=root
  16. DB_PASSWORD=
  17. DB_NAME=jumpserver
  18. ## Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  19. USE_EXTERNAL_REDIS=0
  20. REDIS_HOST=redis
  21. REDIS_PORT=6379
  22. REDIS_PASSWORD=
  23. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  24. COMPOSE_PROJECT_NAME=jms
  25. COMPOSE_HTTP_TIMEOUT=3600
  26. DOCKER_CLIENT_TIMEOUT=3600
  27. DOCKER_SUBNET=192.168.250.0/24
  28. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  29. USE_IPV6=0
  30. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  31. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  32. HTTP_PORT=80
  33. SSH_PORT=2222
  34. RDP_PORT=3389
  35. USE_LB=0
  36. HTTPS_PORT=443
  37. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  38. USE_TASK=1
  39. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  40. USE_XPACK=0
  41. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  42. # SESSION_COOKIE_AGE=86400
  43. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  44. # Koko Lion XRDP 组件配置
  45. CORE_HOST=http://core:8080
  46. ## Lion 开启字体平滑
  47. JUMPSERVER_ENABLE_FONT_SMOOTHING=true
  48. ## Nginx 文件上传大小
  49. CLIENT_MAX_BODY_SIZE=4096m
  50. ## 终端使用宿主 HOSTNAME 标识
  51. SERVER_HOSTNAME=${HOSTNAME}
  52. # 额外的配置
  53. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  3. # 启动
  4. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.18.2
  2. # 启动
  3. ./jmsctl.sh start
  4. # 停止
  5. ./jmsctl.sh down
  6. # 卸载
  7. ./jmsctl.sh uninstall
  8. # 帮助
  9. ./jmsctl.sh -h

Kubernetes

  1. helm repo add jumpserver https://jumpserver.github.io/helm-charts
  2. helm repo list
  3. vi values.yaml
  1. # 模板 https://github.com/jumpserver/helm-charts/blob/main/charts/jumpserver/values.yaml
  2. # Default values for jumpserver.
  3. # This is a YAML-formatted file.
  4. # Declare variables to be passed into your templates.
  5. nameOverride: ""
  6. fullnameOverride: ""
  7. ## @param global.imageRegistry Global Docker image registry
  8. ## @param global.imagePullSecrets Global Docker registry secret names as an array
  9. ## @param global.storageClass Global StorageClass for Persistent Volume(s)
  10. ## @param global.redis.password Global Redis™ password (overrides `auth.password`)
  11. ##
  12. global:
  13. imageRegistry: "docker.io" # 国内可以使用华为云加速 swr.cn-south-1.myhuaweicloud.com
  14. imageTag: v2.16.3 # 版本号
  15. ## E.g.
  16. # imagePullSecrets:
  17. # - myRegistryKeySecretName
  18. ##
  19. imagePullSecrets: []
  20. # - name: yourSecretKey
  21. storageClass: "" # NFS SC
  22. ## If the Redis database included in the chart is disabled, JumpServer will
  23. ## use below parameters to connect to an external Redis server.
  24. ##
  25. externalDatabase: # 数据库相关设置
  26. engine: mysql
  27. host: localhost
  28. port: 3306
  29. user: root
  30. password: ""
  31. database: jumpserver
  32. ## If the MySQL database included in the chart is disabled, JumpServer will
  33. ## use below parameters to connect to an external MySQL server.
  34. ##
  35. externalRedis: # Redis 设置
  36. host: localhost
  37. port: 6379
  38. password: ""
  39. serviceAccount:
  40. # Specifies whether a service account should be created
  41. create: false
  42. # The name of the service account to use.
  43. # If not set and create is true, a name is generated using the fullname template
  44. name:
  45. ingress:
  46. enabled: true
  47. annotations:
  48. # kubernetes.io/tls-acme: "true"
  49. compute-full-forwarded-for: "true"
  50. use-forwarded-headers: "true"
  51. kubernetes.io/ingress.class: nginx
  52. nginx.ingress.kubernetes.io/configuration-snippet: |
  53. proxy_set_header Upgrade "websocket";
  54. proxy_set_header Connection "Upgrade";
  55. hosts:
  56. - "test.jumpserver.org" # 对外域名
  57. tls: []
  58. # - secretName: chart-example-tls
  59. # hosts:
  60. # - chart-example.local
  61. core:
  62. enabled: true
  63. labels:
  64. app.jumpserver.org/name: jms-core
  65. config:
  66. # Generate a new random secret key by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
  67. secretKey: "" # 加密敏感信息的 secret_key, 长度推荐大于 50 位
  68. # Generate a new random bootstrap token by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
  69. bootstrapToken: "" # 组件认证使用的 token, 长度推荐大于 24 位
  70. # Enabled it for debug
  71. debug: false
  72. log:
  73. level: ERROR
  74. replicaCount: 1
  75. image:
  76. registry: docker.io
  77. repository: jumpserver/core
  78. tag: v2.13.2
  79. pullPolicy: IfNotPresent
  80. command: []
  81. env: []
  82. livenessProbe:
  83. failureThreshold: 30
  84. httpGet:
  85. path: /api/health/
  86. port: web
  87. readinessProbe:
  88. failureThreshold: 30
  89. httpGet:
  90. path: /api/health/
  91. port: web
  92. podSecurityContext: {}
  93. # fsGroup: 2000
  94. securityContext: {}
  95. # capabilities:
  96. # drop:
  97. # - ALL
  98. # readOnlyRootFilesystem: true
  99. # runAsNonRoot: true
  100. # runAsUser: 1000
  101. service:
  102. type: ClusterIP
  103. web:
  104. port: 8080
  105. ws:
  106. port: 8070
  107. resources: {}
  108. # We usually recommend not to specify default resources and to leave this as a conscious
  109. # choice for the user. This also increases chances charts run on environments with little
  110. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  111. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  112. # limits:
  113. # cpu: 1000m
  114. # memory: 2048Mi
  115. # requests:
  116. # cpu: 500m
  117. # memory: 1024Mi
  118. persistence:
  119. storageClassName: jumpserver-data
  120. accessModes:
  121. - ReadWriteMany
  122. size: 10Gi
  123. # annotations: {}
  124. finalizers:
  125. - kubernetes.io/pvc-protection
  126. # subPath: ""
  127. # existingClaim:
  128. volumeMounts: []
  129. volumes: []
  130. nodeSelector: {}
  131. tolerations: []
  132. affinity: {}
  133. koko:
  134. enabled: true
  135. labels:
  136. app.jumpserver.org/name: jms-koko
  137. config:
  138. log:
  139. level: ERROR
  140. replicaCount: 1
  141. image:
  142. registry: docker.io
  143. repository: jumpserver/koko
  144. tag: v2.13.2
  145. pullPolicy: IfNotPresent
  146. command: []
  147. env: []
  148. livenessProbe:
  149. failureThreshold: 30
  150. httpGet:
  151. path: /koko/health/
  152. port: web
  153. readinessProbe:
  154. failureThreshold: 30
  155. httpGet:
  156. path: /koko/health/
  157. port: web
  158. podSecurityContext: {}
  159. # fsGroup: 2000
  160. securityContext:
  161. privileged: true
  162. # capabilities:
  163. # drop:
  164. # - ALL
  165. # readOnlyRootFilesystem: true
  166. # runAsNonRoot: true
  167. # runAsUser: 1000
  168. service:
  169. type: ClusterIP
  170. web:
  171. port: 5000
  172. ssh:
  173. port: 2222
  174. resources: {}
  175. # We usually recommend not to specify default resources and to leave this as a conscious
  176. # choice for the user. This also increases chances charts run on environments with little
  177. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  178. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  179. # limits:
  180. # cpu: 100m
  181. # memory: 128Mi
  182. # requests:
  183. # cpu: 100m
  184. # memory: 128Mi
  185. persistence:
  186. storageClassName: jumpserver-data
  187. accessModes:
  188. - ReadWriteMany
  189. size: 10Gi
  190. # annotations: {}
  191. finalizers:
  192. - kubernetes.io/pvc-protection
  193. volumeMounts: []
  194. volumes: []
  195. nodeSelector: {}
  196. tolerations: []
  197. affinity: {}
  198. lion:
  199. enabled: true
  200. labels:
  201. app.jumpserver.org/name: jms-lion
  202. config:
  203. log:
  204. level: ERROR
  205. replicaCount: 1
  206. image:
  207. registry: docker.io
  208. repository: jumpserver/lion
  209. tag: v2.13.2
  210. pullPolicy: IfNotPresent
  211. command: []
  212. env: []
  213. livenessProbe:
  214. failureThreshold: 30
  215. httpGet:
  216. path: /lion/health/
  217. port: web
  218. readinessProbe:
  219. failureThreshold: 30
  220. httpGet:
  221. path: /lion/health/
  222. port: web
  223. podSecurityContext: {}
  224. # fsGroup: 2000
  225. securityContext: {}
  226. # capabilities:
  227. # drop:
  228. # - ALL
  229. # readOnlyRootFilesystem: true
  230. # runAsNonRoot: true
  231. # runAsUser: 1000
  232. service:
  233. type: ClusterIP
  234. web:
  235. port: 8081
  236. resources: {}
  237. # We usually recommend not to specify default resources and to leave this as a conscious
  238. # choice for the user. This also increases chances charts run on environments with little
  239. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  240. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  241. # limits:
  242. # cpu: 100m
  243. # memory: 512Mi
  244. # requests:
  245. # cpu: 100m
  246. # memory: 512Mi
  247. persistence:
  248. storageClassName: jumpserver-data
  249. accessModes:
  250. - ReadWriteMany
  251. size: 10Gi
  252. # annotations: {}
  253. finalizers:
  254. - kubernetes.io/pvc-protection
  255. volumeMounts: []
  256. volumes: []
  257. nodeSelector: {}
  258. tolerations: []
  259. affinity: {}
  260. xpack:
  261. enabled: false # 企业版本打开此选项
  262. omnidb:
  263. labels:
  264. app.jumpserver.org/name: jms-omnidb
  265. config:
  266. log:
  267. level: ERROR
  268. replicaCount: 1
  269. image:
  270. registry: registry.fit2cloud.com
  271. repository: jumpserver/omnidb
  272. tag: v2.13.2
  273. pullPolicy: IfNotPresent
  274. command: []
  275. env: []
  276. livenessProbe:
  277. failureThreshold: 30
  278. tcpSocket:
  279. port: web
  280. readinessProbe:
  281. failureThreshold: 30
  282. tcpSocket:
  283. port: web
  284. podSecurityContext: {}
  285. # fsGroup: 2000
  286. securityContext: {}
  287. # capabilities:
  288. # drop:
  289. # - ALL
  290. # readOnlyRootFilesystem: true
  291. # runAsNonRoot: true
  292. # runAsUser: 1000
  293. service:
  294. type: ClusterIP
  295. web:
  296. port: 8082
  297. ws:
  298. port: 8071
  299. resources: {}
  300. # We usually recommend not to specify default resources and to leave this as a conscious
  301. # choice for the user. This also increases chances charts run on environments with little
  302. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  303. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  304. # limits:
  305. # cpu: 100m
  306. # memory: 128Mi
  307. # requests:
  308. # cpu: 100m
  309. # memory: 128Mi
  310. persistence:
  311. storageClassName: jumpserver-data
  312. accessModes:
  313. - ReadWriteMany
  314. size: 10Gi
  315. # annotations: {}
  316. finalizers:
  317. - kubernetes.io/pvc-protection
  318. volumeMounts: []
  319. volumes: []
  320. nodeSelector: {}
  321. tolerations: []
  322. affinity: {}
  323. xrdp:
  324. labels:
  325. app.jumpserver.org/name: jms-xrdp
  326. config:
  327. log:
  328. level: ERROR
  329. replicaCount: 1
  330. image:
  331. registry: registry.fit2cloud.com
  332. repository: jumpserver/xrdp
  333. tag: v2.13.2
  334. pullPolicy: IfNotPresent
  335. command: []
  336. env: []
  337. livenessProbe:
  338. failureThreshold: 30
  339. tcpSocket:
  340. port: rdp
  341. readinessProbe:
  342. failureThreshold: 30
  343. tcpSocket:
  344. port: rdp
  345. podSecurityContext: {}
  346. # fsGroup: 2000
  347. securityContext: {}
  348. # capabilities:
  349. # drop:
  350. # - ALL
  351. # readOnlyRootFilesystem: true
  352. # runAsNonRoot: true
  353. # runAsUser: 1000
  354. service:
  355. type: ClusterIP
  356. rdp:
  357. port: 3389
  358. resources: {}
  359. # We usually recommend not to specify default resources and to leave this as a conscious
  360. # choice for the user. This also increases chances charts run on environments with little
  361. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  362. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  363. # limits:
  364. # cpu: 100m
  365. # memory: 128Mi
  366. # requests:
  367. # cpu: 100m
  368. # memory: 128Mi
  369. persistence:
  370. storageClassName: jumpserver-data
  371. accessModes:
  372. - ReadWriteMany
  373. size: 10Gi
  374. # annotations: {}
  375. finalizers:
  376. - kubernetes.io/pvc-protection
  377. volumeMounts: []
  378. volumes: []
  379. nodeSelector: {}
  380. tolerations: []
  381. affinity: {}
  382. web:
  383. enabled: true
  384. labels:
  385. app.jumpserver.org/name: jms-web
  386. replicaCount: 1
  387. image:
  388. registry: docker.io
  389. repository: jumpserver/web
  390. tag: v2.13.2
  391. pullPolicy: IfNotPresent
  392. command: []
  393. env: []
  394. livenessProbe:
  395. failureThreshold: 30
  396. httpGet:
  397. path: /api/health/
  398. port: web
  399. readinessProbe:
  400. failureThreshold: 30
  401. httpGet:
  402. path: /api/health/
  403. port: web
  404. podSecurityContext: {}
  405. # fsGroup: 2000
  406. securityContext: {}
  407. # capabilities:
  408. # drop:
  409. # - ALL
  410. # readOnlyRootFilesystem: true
  411. # runAsNonRoot: true
  412. # runAsUser: 1000
  413. service:
  414. type: ClusterIP
  415. web:
  416. port: 80
  417. resources: {}
  418. # We usually recommend not to specify default resources and to leave this as a conscious
  419. # choice for the user. This also increases chances charts run on environments with little
  420. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  421. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  422. # limits:
  423. # cpu: 100m
  424. # memory: 128Mi
  425. # requests:
  426. # cpu: 100m
  427. # memory: 128Mi
  428. persistence:
  429. storageClassName: jumpserver-data
  430. accessModes:
  431. - ReadWriteMany
  432. size: 1Gi
  433. # annotations: {}
  434. finalizers:
  435. - kubernetes.io/pvc-protection
  436. volumeMounts: []
  437. volumes: []
  438. nodeSelector: {}
  439. tolerations: []
  440. affinity: {}
  1. # 安装
  2. helm install jms-k8s jumpserver/jumpserver -n default -f values.yaml
  3. # 卸载
  4. helm uninstall jms-k8s -n default

源码部署

Allinone

更多内容参考 https 配置 快速入门