安装文档

说明

全新安装的 Linux
需要连接 互联网
使用 root 用户执行

可以使用由 华为云 提供的容器镜像服务 ❤

区域镜像仓库地址配置文件 /opt/jumpserver/config/config.txtKubernetes values.yaml
华北-北京一swr.cn-north-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-1.myhuaweicloud.comrepository: swr.cn-north-1.myhuaweicloud.com
华北-北京四swr.cn-north-4.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-4.myhuaweicloud.comrepository: swr.cn-north-4.myhuaweicloud.com
华南-广州swr.cn-south-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.comrepository: swr.cn-south-1.myhuaweicloud.com
华东-上海一swr.cn-east-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-east-3.myhuaweicloud.comrepository: swr.cn-east-3.myhuaweicloud.com
亚太-香港swr.ap-southeast-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-1.myhuaweicloud.comrepository: swr.ap-southeast-1.myhuaweicloud.com
亚太-新加坡swr.ap-southeast-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-3.myhuaweicloud.comrepository: swr.ap-southeast-3.myhuaweicloud.com

安装方式

外置环境要求

  • 推荐使用外置 数据库 和 Redis，方便日后扩展升级
DBVersionCacheVersion
MySQL>= 5.7Redis>= 6.0
MariaDB>= 10.2

一键部署

  1. # 默认会安装到 /opt/jumpserver-installer-v2.13.2 目录
  2. curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.13.2/quick_start.sh | bash
  3. cd /opt/jumpserver-installer-v2.13.2
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.13.2
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

手动部署

  1. cd /opt
  2. wget https://github.com/jumpserver/installer/releases/download/v2.13.2/jumpserver-installer-v2.13.2.tar.gz
  3. tar -xf jumpserver-installer-v2.13.2.tar.gz
  4. cd jumpserver-installer-v2.13.2
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  7. VOLUME_DIR=/opt/jumpserver
  8. DOCKER_DIR=/var/lib/docker
  9. SECRET_KEY=
  10. BOOTSTRAP_TOKEN=
  11. LOG_LEVEL=ERROR
  13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  14. USE_EXTERNAL_MYSQL=0
  15. DB_HOST=mysql
  16. DB_PORT=3306
  17. DB_USER=root
  18. DB_PASSWORD=
  19. DB_NAME=jumpserver
  21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  22. USE_EXTERNAL_REDIS=0
  23. REDIS_HOST=redis
  24. REDIS_PORT=6379
  25. REDIS_PASSWORD=
  27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  28. COMPOSE_PROJECT_NAME=jms
  29. COMPOSE_HTTP_TIMEOUT=3600
  30. DOCKER_CLIENT_TIMEOUT=3600
  31. DOCKER_SUBNET=192.168.250.0/24
  33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  34. USE_IPV6=0
  35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  38. HTTP_PORT=80
  39. SSH_PORT=2222
  40. RDP_PORT=3389
  42. USE_LB=0
  43. HTTPS_PORT=443
  45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  46. USE_TASK=1
  48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  49. USE_XPACK=0
  51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  52. # SESSION_COOKIE_AGE=86400
  53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  55. # Koko Lion XRDP 组件配置
  56. CORE_HOST=http://core:8080
  58. # 额外的配置
  59. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.13.2
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

离线部署(amd64)

从飞致云社区 下载最新的 linux/amd64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. unzip jumpserver-offline-installer-v2.13.2-amd64-11.tar.gz
  3. cd jumpserver-offline-installer-v2.13.2-amd64-11
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  7. VOLUME_DIR=/opt/jumpserver
  8. DOCKER_DIR=/var/lib/docker
  9. SECRET_KEY=
  10. BOOTSTRAP_TOKEN=
  11. LOG_LEVEL=ERROR
  13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  14. USE_EXTERNAL_MYSQL=0
  15. DB_HOST=mysql
  16. DB_PORT=3306
  17. DB_USER=root
  18. DB_PASSWORD=
  19. DB_NAME=jumpserver
  21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  22. USE_EXTERNAL_REDIS=0
  23. REDIS_HOST=redis
  24. REDIS_PORT=6379
  25. REDIS_PASSWORD=
  27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  28. COMPOSE_PROJECT_NAME=jms
  29. COMPOSE_HTTP_TIMEOUT=3600
  30. DOCKER_CLIENT_TIMEOUT=3600
  31. DOCKER_SUBNET=192.168.250.0/24
  33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  34. USE_IPV6=0
  35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  38. HTTP_PORT=80
  39. SSH_PORT=2222
  40. RDP_PORT=3389
  42. USE_LB=0
  43. HTTPS_PORT=443
  45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  46. USE_TASK=1
  48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  49. USE_XPACK=0
  51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  52. # SESSION_COOKIE_AGE=86400
  53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  55. # Koko Lion XRDP 组件配置
  56. CORE_HOST=http://core:8080
  58. # 额外的配置
  59. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.13.2
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

离线部署(arm64)

从飞致云社区 下载最新的 linux/arm64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. unzip jumpserver-offline-installer-v2.13.2-arm64-14.tar.gz
  3. cd jumpserver-offline-installer-v2.13.2-arm64-14
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  7. VOLUME_DIR=/opt/jumpserver
  8. DOCKER_DIR=/var/lib/docker
  9. SECRET_KEY=
  10. BOOTSTRAP_TOKEN=
  11. LOG_LEVEL=ERROR
  13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  14. USE_EXTERNAL_MYSQL=0
  15. DB_HOST=mysql
  16. DB_PORT=3306
  17. DB_USER=root
  18. DB_PASSWORD=
  19. DB_NAME=jumpserver
  21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  22. USE_EXTERNAL_REDIS=0
  23. REDIS_HOST=redis
  24. REDIS_PORT=6379
  25. REDIS_PASSWORD=
  27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  28. COMPOSE_PROJECT_NAME=jms
  29. COMPOSE_HTTP_TIMEOUT=3600
  30. DOCKER_CLIENT_TIMEOUT=3600
  31. DOCKER_SUBNET=192.168.250.0/24
  33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  34. USE_IPV6=0
  35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  38. HTTP_PORT=80
  39. SSH_PORT=2222
  40. RDP_PORT=3389
  42. USE_LB=0
  43. HTTPS_PORT=443
  45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  46. USE_TASK=1
  48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  49. USE_XPACK=0
  51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  52. # SESSION_COOKIE_AGE=86400
  53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  55. # Koko Lion XRDP 组件配置
  56. CORE_HOST=http://core:8080
  58. # 额外的配置
  59. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.13.2
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

Kubernetes

  1. cd /opt
  2. git clone https://github.com/jumpserver/helm
  3. cd /opt/helm
  4. vi values.yaml
  1. # Default values for jumpserver.
  2. # This is a YAML-formatted file.
  3. # Declare variables to be passed into your templates.
  5. nameOverride: ""
  6. fullnameOverride: ""
  8. serviceAccount:
  9.   # Specifies whether a service account should be created
  10.   create: false
  11.   # The name of the service account to use.
  12.   # If not set and create is true, a name is generated using the fullname template
  13.   name:
  15. imagePullSecrets: []
  16. # - name: yourImagePullSecret
  18. ingress:
  19.   enabled: true
  20.   annotations:
  21.     # kubernetes.io/tls-acme: "true"
  22.     compute-full-forwarded-for: "true"
  23.     use-forwarded-headers: "true"
  24.     kubernetes.io/ingress.class: nginx
  25.     nginx.ingress.kubernetes.io/configuration-snippet: |
  26.        proxy_set_header Upgrade "websocket";
  27.        proxy_set_header Connection "Upgrade";
  28.   hosts:
  29.     - "test.jumpserver.org"  # 通过 ingress 暴露对外域名, 自行修改成你的域名
  30.   tls: []
  31.   #  - secretName: chart-example-tls
  32.   #    hosts:
  33.   #      - chart-example.local
  35. core:
  36.   enabled: true
  38.   labels:
  39.     app.jumpserver.org/name: jms-core
  41.   config:
  42.     # Generate a new random secret key by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
  43.     secretKey: "*************"  # 加密 key, 随机生成保管好
  44.     # Generate a new random bootstrap token by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
  45.     bootstrapToken: "********"  # 组件组成使用 token
  46.     # Enabled it for debug
  47.     debug: false
  48.     log:
  49.       level: ERROR
  50.     # Fill it with your mysql config
  51.     db:
  52.       engine: mysql         # mysql 相关, 自行搭建后填写对应信息
  53.       host: "192.168.1.1"
  54.       port: 3306
  55.       user: jumpserver
  56.       password: "*******"
  57.       name: jumpserver
  58.     # Fill it with your redis config
  59.     redis:
  60.       host: "192.168.1.1"  # redis 相关, 自行搭建后填写对应信息
  61.       port: 6379
  62.       password: "*******"
  64.   replicaCount: 1          # 副本数, 可以通过 kebuctl scale 实时扩容
  66.   image:
  67.     repository: docker.io/jumpserver/core  # 镜像地址, 默认使用 docker.io
  68.     tag: v2.13.1
  69.     pullPolicy: IfNotPresent
  71.   command: []
  73.   env: []
  75.   livenessProbe:
  76.     failureThreshold: 30
  77.     httpGet:
  78.       path: /api/health/
  79.       port: web
  81.   readinessProbe:
  82.     failureThreshold: 30
  83.     httpGet:
  84.       path: /api/health/
  85.       port: web
  87.   podSecurityContext: {}
  88.     # fsGroup: 2000
  90.   securityContext: {}
  91.     # capabilities:
  92.     #   drop:
  93.     #   - ALL
  94.     # readOnlyRootFilesystem: true
  95.     # runAsNonRoot: true
  96.     # runAsUser: 1000
  98.   service:
  99.     type: ClusterIP
  100.     web:
  101.       port: 8080
  102.     ws:
  103.       port: 8070
  105.   resources: {}
  106.     # We usually recommend not to specify default resources and to leave this as a conscious
  107.     # choice for the user. This also increases chances charts run on environments with little
  108.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  109.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  110.     # limits:
  111.     #   cpu: 1000m
  112.     #   memory: 2048Mi
  113.     # requests:
  114.     #   cpu: 500m
  115.     #   memory: 1024Mi
  117.   persistence:
  118.     storageClassName: jumpserver-data  # 请先自行创建 SC, 然后将名称填入此处, 其他组件也要修改
  119.     accessModes:
  120.       - ReadWriteMany                  # 规则必须为 RWM, 多 pod 需要共同读写
  121.     size: 10Gi                         # 生产环境推荐 100G 以上
  122.     # annotations: {}
  123.     finalizers:
  124.       - kubernetes.io/pvc-protection
  125.     # subPath: ""
  126.     # existingClaim:
  128.   volumeMounts: []
  130.   volumes: []
  132.   nodeSelector: {}
  134.   tolerations: []
  136.   affinity: {}
  138. koko:
  139.   enabled: true
  141.   labels:
  142.     app.jumpserver.org/name: jms-koko
  144.   config:
  145.     log:
  146.       level: ERROR
  148.   replicaCount: 1
  150.   image:
  151.     repository: docker.io/jumpserver/koko
  152.     tag: v2.13.1
  153.     pullPolicy: IfNotPresent
  155.   command: []
  157.   env: []
  159.   livenessProbe:
  160.     failureThreshold: 30
  161.     httpGet:
  162.       path: /koko/health/
  163.       port: web
  165.   readinessProbe:
  166.     failureThreshold: 30
  167.     httpGet:
  168.       path: /koko/health/
  169.       port: web
  171.   podSecurityContext: {}
  172.     # fsGroup: 2000
  174.   securityContext:
  175.     privileged: true
  176.     # capabilities:
  177.     #   drop:
  178.     #   - ALL
  179.     # readOnlyRootFilesystem: true
  180.     # runAsNonRoot: true
  181.     # runAsUser: 1000
  183.   service:
  184.     type: ClusterIP
  185.     web:
  186.       port: 5000
  187.     ssh:
  188.       port: 2222
  190.   resources: {}
  191.     # We usually recommend not to specify default resources and to leave this as a conscious
  192.     # choice for the user. This also increases chances charts run on environments with little
  193.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  194.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  195.     # limits:
  196.     #   cpu: 100m
  197.     #   memory: 128Mi
  198.     # requests:
  199.     #   cpu: 100m
  200.     #   memory: 128Mi
  202.   persistence:
  203.     storageClassName: jumpserver-data  # custom
  204.     accessModes:
  205.       - ReadWriteMany
  206.     size: 10Gi
  207.     # annotations: {}
  208.     finalizers:
  209.       - kubernetes.io/pvc-protection
  211.   volumeMounts: []
  213.   volumes: []
  215.   nodeSelector: {}
  217.   tolerations: []
  219.   affinity: {}
  221. lion:
  222.   enabled: true
  224.   labels:
  225.     app.jumpserver.org/name: jms-lion
  227.   config:
  228.     log:
  229.       level: ERROR
  231.   replicaCount: 1
  233.   image:
  234.     repository: docker.io/jumpserver/lion
  235.     tag: v2.13.1
  236.     pullPolicy: IfNotPresent
  238.   command: []
  240.   env: []
  242.   livenessProbe:
  243.     failureThreshold: 30
  244.     httpGet:
  245.       path: /lion/health/
  246.       port: web
  248.   readinessProbe:
  249.     failureThreshold: 30
  250.     httpGet:
  251.       path: /lion/health/
  252.       port: web
  254.   podSecurityContext: {}
  255.     # fsGroup: 2000
  257.   securityContext: {}
  258.     # capabilities:
  259.     #   drop:
  260.     #   - ALL
  261.     # readOnlyRootFilesystem: true
  262.     # runAsNonRoot: true
  263.     # runAsUser: 1000
  265.   service:
  266.     type: ClusterIP
  267.     web:
  268.       port: 8081
  270.   resources: {}
  271.     # We usually recommend not to specify default resources and to leave this as a conscious
  272.     # choice for the user. This also increases chances charts run on environments with little
  273.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  274.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  275.     # limits:
  276.     #   cpu: 100m
  277.     #   memory: 512Mi
  278.     # requests:
  279.     #   cpu: 100m
  280.     #   memory: 512Mi
  282.   persistence:
  283.     storageClassName: jumpserver-data  # custom
  284.     accessModes:
  285.       - ReadWriteMany
  286.     size: 10Gi
  287.     # annotations: {}
  288.     finalizers:
  289.       - kubernetes.io/pvc-protection
  291.   volumeMounts: []
  293.   volumes: []
  295.   nodeSelector: {}
  297.   tolerations: []
  299.   affinity: {}
  301. xpack:
  302.   enabled: false    # 企业版 xpack, 开源版本修改无效, 请保持默认
  304. omnidb:
  305.   labels:
  306.     app.jumpserver.org/name: jms-omnidb
  308.   config:
  309.     log:
  310.       level: ERROR
  312.   replicaCount: 1
  314.   image:
  315.     repository: registry.fit2cloud.com/jumpserver/omnidb
  316.     tag: v2.13.1
  317.     pullPolicy: IfNotPresent
  319.   command: []
  321.   env: []
  323.   livenessProbe:
  324.     failureThreshold: 30
  325.     tcpSocket:
  326.       port: web
  328.   readinessProbe:
  329.     failureThreshold: 30
  330.     tcpSocket:
  331.       port: web
  333.   podSecurityContext: {}
  334.     # fsGroup: 2000
  336.   securityContext: {}
  337.     # capabilities:
  338.     #   drop:
  339.     #   - ALL
  340.     # readOnlyRootFilesystem: true
  341.     # runAsNonRoot: true
  342.     # runAsUser: 1000
  344.   service:
  345.     type: ClusterIP
  346.     web:
  347.       port: 8082
  348.     ws:
  349.       port: 8071
  351.   resources: {}
  352.     # We usually recommend not to specify default resources and to leave this as a conscious
  353.     # choice for the user. This also increases chances charts run on environments with little
  354.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  355.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  356.     # limits:
  357.     #   cpu: 100m
  358.     #   memory: 128Mi
  359.     # requests:
  360.     #   cpu: 100m
  361.     #   memory: 128Mi
  363.   persistence:
  364.     storageClassName: jumpserver-data
  365.     accessModes:
  366.       - ReadWriteMany
  367.     size: 10Gi
  368.     # annotations: {}
  369.     finalizers:
  370.       - kubernetes.io/pvc-protection
  372.   volumeMounts: []
  374.   volumes: []
  376.   nodeSelector: {}
  378.   tolerations: []
  380.   affinity: {}
  382. xrdp:
  383.   labels:
  384.     app.jumpserver.org/name: jms-xrdp
  386.   config:
  387.     log:
  388.       level: ERROR
  390.   replicaCount: 1
  392.   image:
  393.     repository: registry.fit2cloud.com/jumpserver/xrdp
  394.     tag: v2.13.1
  395.     pullPolicy: IfNotPresent
  397.   command: []
  399.   env: []
  401.   livenessProbe:
  402.     failureThreshold: 30
  403.     tcpSocket:
  404.       port: rdp
  406.   readinessProbe:
  407.     failureThreshold: 30
  408.     tcpSocket:
  409.       port: rdp
  411.   podSecurityContext: {}
  412.     # fsGroup: 2000
  414.   securityContext: {}
  415.     # capabilities:
  416.     #   drop:
  417.     #   - ALL
  418.     # readOnlyRootFilesystem: true
  419.     # runAsNonRoot: true
  420.     # runAsUser: 1000
  422.   service:
  423.     type: ClusterIP
  424.     rdp:
  425.       port: 3389
  427.   resources: {}
  428.     # We usually recommend not to specify default resources and to leave this as a conscious
  429.     # choice for the user. This also increases chances charts run on environments with little
  430.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  431.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  432.     # limits:
  433.     #   cpu: 100m
  434.     #   memory: 128Mi
  435.     # requests:
  436.     #   cpu: 100m
  437.     #   memory: 128Mi
  439.   persistence:
  440.     storageClassName: jumpserver-data
  441.     accessModes:
  442.       - ReadWriteMany
  443.     size: 10Gi
  444.     # annotations: {}
  445.     finalizers:
  446.       - kubernetes.io/pvc-protection
  448.   volumeMounts: []
  450.   volumes: []
  452.   nodeSelector: {}
  454.   tolerations: []
  456.   affinity: {}
  458. web:
  459.   enabled: true
  461.   labels:
  462.     app.jumpserver.org/name: jms-web
  464.   replicaCount: 1
  466.   image:
  467.     repository: docker.io/jumpserver/web
  468.     tag: v2.13.1
  469.     pullPolicy: IfNotPresent
  471.   command: []
  473.   env: []
  475.   livenessProbe:
  476.     failureThreshold: 30
  477.     httpGet:
  478.       path: /api/health/
  479.       port: web
  481.   readinessProbe:
  482.     failureThreshold: 30
  483.     httpGet:
  484.       path: /api/health/
  485.       port: web
  487.   podSecurityContext: {}
  488.     # fsGroup: 2000
  490.   securityContext: {}
  491.     # capabilities:
  492.     #   drop:
  493.     #   - ALL
  494.     # readOnlyRootFilesystem: true
  495.     # runAsNonRoot: true
  496.     # runAsUser: 1000
  498.   service:
  499.     type: ClusterIP
  500.     web:
  501.       port: 80
  503.   resources: {}
  504.     # We usually recommend not to specify default resources and to leave this as a conscious
  505.     # choice for the user. This also increases chances charts run on environments with little
  506.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  507.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  508.     # limits:
  509.     #   cpu: 100m
  510.     #   memory: 128Mi
  511.     # requests:
  512.     #   cpu: 100m
  513.     #   memory: 128Mi
  515.   persistence:
  516.     storageClassName: jumpserver-data
  517.     accessModes:
  518.       - ReadWriteMany
  519.     size: 1Gi
  520.     # annotations: {}
  521.     finalizers:
  522.       - kubernetes.io/pvc-protection
  524.   volumeMounts: []
  526.   volumes: []
  528.   nodeSelector: {}
  530.   tolerations: []
  532.   affinity: {}
  1. # 安装
  2. helm install jumpserver ./ -n default
  4. # 卸载
  5. helm uninstall jumpserver -n default
  7. # 查看
  8. helm list -n default

源码部署

Allinone

后续的使用请参考 安全建议 快速入门