安装文档

说明

全新安装的 Linux
需要连接 互联网
使用 root 用户执行

可以使用由 华为云 提供的容器镜像服务 ❤

区域镜像仓库地址配置文件 /opt/jumpserver/config/config.txtKubernetes values.yaml
华北-北京一swr.cn-north-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-1.myhuaweicloud.comrepository: swr.cn-north-1.myhuaweicloud.com
华北-北京四swr.cn-north-4.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-4.myhuaweicloud.comrepository: swr.cn-north-4.myhuaweicloud.com
华南-广州swr.cn-south-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.comrepository: swr.cn-south-1.myhuaweicloud.com
华东-上海一swr.cn-east-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-east-3.myhuaweicloud.comrepository: swr.cn-east-3.myhuaweicloud.com
亚太-香港swr.ap-southeast-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-1.myhuaweicloud.comrepository: swr.ap-southeast-1.myhuaweicloud.com
亚太-新加坡swr.ap-southeast-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-3.myhuaweicloud.comrepository: swr.ap-southeast-3.myhuaweicloud.com

安装方式

外置环境要求

  • 推荐使用外置 数据库 和 Redis,方便日后扩展升级
DBVersionCacheVersion
MySQL>= 5.7Redis>= 5.0
MariaDB>= 10.2

一键部署

  1. # 默认会安装到 /opt/jumpserver-installer-v2.15.1 目录
  2. curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.15.1/quick_start.sh | bash
  3. cd /opt/jumpserver-installer-v2.15.1
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.15.1
  2. # 启动
  3. ./jmsctl.sh start
  4. # 停止
  5. ./jmsctl.sh down
  6. # 卸载
  7. ./jmsctl.sh uninstall
  8. # 帮助
  9. ./jmsctl.sh -h

手动部署

  1. cd /opt
  2. wget https://github.com/jumpserver/installer/releases/download/v2.15.1/jumpserver-installer-v2.15.1.tar.gz
  3. tar -xf jumpserver-installer-v2.15.1.tar.gz
  4. cd jumpserver-installer-v2.15.1
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  4. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  5. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. VOLUME_DIR=/opt/jumpserver
  7. DOCKER_DIR=/var/lib/docker
  8. SECRET_KEY=
  9. BOOTSTRAP_TOKEN=
  10. LOG_LEVEL=ERROR
  11. ## MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  12. USE_EXTERNAL_MYSQL=0
  13. DB_HOST=mysql
  14. DB_PORT=3306
  15. DB_USER=root
  16. DB_PASSWORD=
  17. DB_NAME=jumpserver
  18. ## Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  19. USE_EXTERNAL_REDIS=0
  20. REDIS_HOST=redis
  21. REDIS_PORT=6379
  22. REDIS_PASSWORD=
  23. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  24. COMPOSE_PROJECT_NAME=jms
  25. COMPOSE_HTTP_TIMEOUT=3600
  26. DOCKER_CLIENT_TIMEOUT=3600
  27. DOCKER_SUBNET=192.168.250.0/24
  28. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  29. USE_IPV6=0
  30. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  31. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  32. HTTP_PORT=80
  33. SSH_PORT=2222
  34. RDP_PORT=3389
  35. USE_LB=0
  36. HTTPS_PORT=443
  37. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  38. USE_TASK=1
  39. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  40. USE_XPACK=0
  41. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  42. # SESSION_COOKIE_AGE=86400
  43. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  44. # Koko Lion XRDP 组件配置
  45. CORE_HOST=http://core:8080
  46. # 额外的配置
  47. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  3. # 启动
  4. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.15.1
  2. # 启动
  3. ./jmsctl.sh start
  4. # 停止
  5. ./jmsctl.sh down
  6. # 卸载
  7. ./jmsctl.sh uninstall
  8. # 帮助
  9. ./jmsctl.sh -h

离线部署(amd64)

从飞致云社区 下载最新的 linux/amd64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.15.1-amd64-82.tar.gz
  3. cd jumpserver-offline-installer-v2.15.1-amd64-82
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  4. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  5. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. VOLUME_DIR=/opt/jumpserver
  7. DOCKER_DIR=/var/lib/docker
  8. SECRET_KEY=
  9. BOOTSTRAP_TOKEN=
  10. LOG_LEVEL=ERROR
  11. ## MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  12. USE_EXTERNAL_MYSQL=0
  13. DB_HOST=mysql
  14. DB_PORT=3306
  15. DB_USER=root
  16. DB_PASSWORD=
  17. DB_NAME=jumpserver
  18. ## Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  19. USE_EXTERNAL_REDIS=0
  20. REDIS_HOST=redis
  21. REDIS_PORT=6379
  22. REDIS_PASSWORD=
  23. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  24. COMPOSE_PROJECT_NAME=jms
  25. COMPOSE_HTTP_TIMEOUT=3600
  26. DOCKER_CLIENT_TIMEOUT=3600
  27. DOCKER_SUBNET=192.168.250.0/24
  28. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  29. USE_IPV6=0
  30. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  31. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  32. HTTP_PORT=80
  33. SSH_PORT=2222
  34. RDP_PORT=3389
  35. USE_LB=0
  36. HTTPS_PORT=443
  37. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  38. USE_TASK=1
  39. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  40. USE_XPACK=0
  41. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  42. # SESSION_COOKIE_AGE=86400
  43. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  44. # Koko Lion XRDP 组件配置
  45. CORE_HOST=http://core:8080
  46. # 额外的配置
  47. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  3. # 启动
  4. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.15.1
  2. # 启动
  3. ./jmsctl.sh start
  4. # 停止
  5. ./jmsctl.sh down
  6. # 卸载
  7. ./jmsctl.sh uninstall
  8. # 帮助
  9. ./jmsctl.sh -h

离线部署(arm64)

从飞致云社区 下载最新的 linux/arm64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.15.1-arm64-74.tar.gz
  3. cd jumpserver-offline-installer-v2.15.1-arm64-74
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  4. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  5. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. VOLUME_DIR=/opt/jumpserver
  7. DOCKER_DIR=/var/lib/docker
  8. SECRET_KEY=
  9. BOOTSTRAP_TOKEN=
  10. LOG_LEVEL=ERROR
  11. ## MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  12. USE_EXTERNAL_MYSQL=0
  13. DB_HOST=mysql
  14. DB_PORT=3306
  15. DB_USER=root
  16. DB_PASSWORD=
  17. DB_NAME=jumpserver
  18. ## Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  19. USE_EXTERNAL_REDIS=0
  20. REDIS_HOST=redis
  21. REDIS_PORT=6379
  22. REDIS_PASSWORD=
  23. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  24. COMPOSE_PROJECT_NAME=jms
  25. COMPOSE_HTTP_TIMEOUT=3600
  26. DOCKER_CLIENT_TIMEOUT=3600
  27. DOCKER_SUBNET=192.168.250.0/24
  28. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  29. USE_IPV6=0
  30. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  31. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  32. HTTP_PORT=80
  33. SSH_PORT=2222
  34. RDP_PORT=3389
  35. USE_LB=0
  36. HTTPS_PORT=443
  37. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  38. USE_TASK=1
  39. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  40. USE_XPACK=0
  41. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  42. # SESSION_COOKIE_AGE=86400
  43. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  44. # Koko Lion XRDP 组件配置
  45. CORE_HOST=http://core:8080
  46. # 额外的配置
  47. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  3. # 启动
  4. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.15.1
  2. # 启动
  3. ./jmsctl.sh start
  4. # 停止
  5. ./jmsctl.sh down
  6. # 卸载
  7. ./jmsctl.sh uninstall
  8. # 帮助
  9. ./jmsctl.sh -h

Kubernetes

  1. cd /opt
  2. git clone https://github.com/jumpserver/helm
  3. cd /opt/helm
  4. cat values.yaml
  1. # Default values for jumpserver.
  2. # This is a YAML-formatted file.
  3. # Declare variables to be passed into your templates.
  4. nameOverride: ""
  5. fullnameOverride: ""
  6. ## @param global.imageRegistry Global Docker image registry
  7. ## @param global.imagePullSecrets Global Docker registry secret names as an array
  8. ## @param global.storageClass Global StorageClass for Persistent Volume(s)
  9. ## @param global.redis.password Global Redis™ password (overrides `auth.password`)
  10. ##
  11. global:
  12. imageRegistry: "docker.io" # 国内可以使用华为云加速
  13. ## E.g.
  14. # imagePullSecrets:
  15. # - myRegistryKeySecretName
  16. ##
  17. imagePullSecrets: []
  18. storageClass: "" # NFS SC
  19. ## If the Redis database included in the chart is disabled, JumpServer will
  20. ## use below parameters to connect to an external Redis server.
  21. ##
  22. externalDatabase: # 数据库相关设置
  23. engine: mysql
  24. host: localhost
  25. port: 3306
  26. user: root
  27. password: ""
  28. database: jumpserver
  29. ## If the MySQL database included in the chart is disabled, JumpServer will
  30. ## use below parameters to connect to an external MySQL server.
  31. ##
  32. externalRedis: # Redis 设置
  33. host: localhost
  34. port: 6379
  35. password: ""
  36. serviceAccount:
  37. # Specifies whether a service account should be created
  38. create: false
  39. # The name of the service account to use.
  40. # If not set and create is true, a name is generated using the fullname template
  41. name:
  42. ingress:
  43. enabled: true
  44. annotations:
  45. # kubernetes.io/tls-acme: "true"
  46. compute-full-forwarded-for: "true"
  47. use-forwarded-headers: "true"
  48. kubernetes.io/ingress.class: nginx
  49. nginx.ingress.kubernetes.io/configuration-snippet: |
  50. proxy_set_header Upgrade "websocket";
  51. proxy_set_header Connection "Upgrade";
  52. hosts:
  53. - "test.jumpserver.org" # 对外域名
  54. tls: []
  55. # - secretName: chart-example-tls
  56. # hosts:
  57. # - chart-example.local
  58. core:
  59. enabled: true
  60. labels:
  61. app.jumpserver.org/name: jms-core
  62. config:
  63. # Generate a new random secret key by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
  64. secretKey: ""
  65. # Generate a new random bootstrap token by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
  66. bootstrapToken: ""
  67. # Enabled it for debug
  68. debug: false
  69. log:
  70. level: ERROR
  71. replicaCount: 1
  72. image:
  73. registry: docker.io
  74. repository: jumpserver/core
  75. tag: v2.13.2
  76. pullPolicy: IfNotPresent
  77. command: []
  78. env: []
  79. livenessProbe:
  80. failureThreshold: 30
  81. httpGet:
  82. path: /api/health/
  83. port: web
  84. readinessProbe:
  85. failureThreshold: 30
  86. httpGet:
  87. path: /api/health/
  88. port: web
  89. podSecurityContext: {}
  90. # fsGroup: 2000
  91. securityContext: {}
  92. # capabilities:
  93. # drop:
  94. # - ALL
  95. # readOnlyRootFilesystem: true
  96. # runAsNonRoot: true
  97. # runAsUser: 1000
  98. service:
  99. type: ClusterIP
  100. web:
  101. port: 8080
  102. ws:
  103. port: 8070
  104. resources: {}
  105. # We usually recommend not to specify default resources and to leave this as a conscious
  106. # choice for the user. This also increases chances charts run on environments with little
  107. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  108. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  109. # limits:
  110. # cpu: 1000m
  111. # memory: 2048Mi
  112. # requests:
  113. # cpu: 500m
  114. # memory: 1024Mi
  115. persistence:
  116. storageClassName: jumpserver-data
  117. accessModes:
  118. - ReadWriteMany
  119. size: 10Gi
  120. # annotations: {}
  121. finalizers:
  122. - kubernetes.io/pvc-protection
  123. # subPath: ""
  124. # existingClaim:
  125. volumeMounts: []
  126. volumes: []
  127. nodeSelector: {}
  128. tolerations: []
  129. affinity: {}
  130. koko:
  131. enabled: true
  132. labels:
  133. app.jumpserver.org/name: jms-koko
  134. config:
  135. log:
  136. level: ERROR
  137. replicaCount: 1
  138. image:
  139. registry: docker.io
  140. repository: jumpserver/koko
  141. tag: v2.13.2
  142. pullPolicy: IfNotPresent
  143. command: []
  144. env: []
  145. livenessProbe:
  146. failureThreshold: 30
  147. httpGet:
  148. path: /koko/health/
  149. port: web
  150. readinessProbe:
  151. failureThreshold: 30
  152. httpGet:
  153. path: /koko/health/
  154. port: web
  155. podSecurityContext: {}
  156. # fsGroup: 2000
  157. securityContext:
  158. privileged: true
  159. # capabilities:
  160. # drop:
  161. # - ALL
  162. # readOnlyRootFilesystem: true
  163. # runAsNonRoot: true
  164. # runAsUser: 1000
  165. service:
  166. type: ClusterIP
  167. web:
  168. port: 5000
  169. ssh:
  170. port: 2222
  171. resources: {}
  172. # We usually recommend not to specify default resources and to leave this as a conscious
  173. # choice for the user. This also increases chances charts run on environments with little
  174. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  175. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  176. # limits:
  177. # cpu: 100m
  178. # memory: 128Mi
  179. # requests:
  180. # cpu: 100m
  181. # memory: 128Mi
  182. persistence:
  183. storageClassName: jumpserver-data
  184. accessModes:
  185. - ReadWriteMany
  186. size: 10Gi
  187. # annotations: {}
  188. finalizers:
  189. - kubernetes.io/pvc-protection
  190. volumeMounts: []
  191. volumes: []
  192. nodeSelector: {}
  193. tolerations: []
  194. affinity: {}
  195. lion:
  196. enabled: true
  197. labels:
  198. app.jumpserver.org/name: jms-lion
  199. config:
  200. log:
  201. level: ERROR
  202. replicaCount: 1
  203. image:
  204. registry: docker.io
  205. repository: jumpserver/lion
  206. tag: v2.13.2
  207. pullPolicy: IfNotPresent
  208. command: []
  209. env: []
  210. livenessProbe:
  211. failureThreshold: 30
  212. httpGet:
  213. path: /lion/health/
  214. port: web
  215. readinessProbe:
  216. failureThreshold: 30
  217. httpGet:
  218. path: /lion/health/
  219. port: web
  220. podSecurityContext: {}
  221. # fsGroup: 2000
  222. securityContext: {}
  223. # capabilities:
  224. # drop:
  225. # - ALL
  226. # readOnlyRootFilesystem: true
  227. # runAsNonRoot: true
  228. # runAsUser: 1000
  229. service:
  230. type: ClusterIP
  231. web:
  232. port: 8081
  233. resources: {}
  234. # We usually recommend not to specify default resources and to leave this as a conscious
  235. # choice for the user. This also increases chances charts run on environments with little
  236. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  237. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  238. # limits:
  239. # cpu: 100m
  240. # memory: 512Mi
  241. # requests:
  242. # cpu: 100m
  243. # memory: 512Mi
  244. persistence:
  245. storageClassName: jumpserver-data
  246. accessModes:
  247. - ReadWriteMany
  248. size: 10Gi
  249. # annotations: {}
  250. finalizers:
  251. - kubernetes.io/pvc-protection
  252. volumeMounts: []
  253. volumes: []
  254. nodeSelector: {}
  255. tolerations: []
  256. affinity: {}
  257. xpack:
  258. enabled: false # 企业版本打开此选项
  259. omnidb:
  260. labels:
  261. app.jumpserver.org/name: jms-omnidb
  262. config:
  263. log:
  264. level: ERROR
  265. replicaCount: 1
  266. image:
  267. registry: registry.fit2cloud.com
  268. repository: jumpserver/omnidb
  269. tag: v2.13.2
  270. pullPolicy: IfNotPresent
  271. command: []
  272. env: []
  273. livenessProbe:
  274. failureThreshold: 30
  275. tcpSocket:
  276. port: web
  277. readinessProbe:
  278. failureThreshold: 30
  279. tcpSocket:
  280. port: web
  281. podSecurityContext: {}
  282. # fsGroup: 2000
  283. securityContext: {}
  284. # capabilities:
  285. # drop:
  286. # - ALL
  287. # readOnlyRootFilesystem: true
  288. # runAsNonRoot: true
  289. # runAsUser: 1000
  290. service:
  291. type: ClusterIP
  292. web:
  293. port: 8082
  294. ws:
  295. port: 8071
  296. resources: {}
  297. # We usually recommend not to specify default resources and to leave this as a conscious
  298. # choice for the user. This also increases chances charts run on environments with little
  299. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  300. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  301. # limits:
  302. # cpu: 100m
  303. # memory: 128Mi
  304. # requests:
  305. # cpu: 100m
  306. # memory: 128Mi
  307. persistence:
  308. storageClassName: jumpserver-data
  309. accessModes:
  310. - ReadWriteMany
  311. size: 10Gi
  312. # annotations: {}
  313. finalizers:
  314. - kubernetes.io/pvc-protection
  315. volumeMounts: []
  316. volumes: []
  317. nodeSelector: {}
  318. tolerations: []
  319. affinity: {}
  320. xrdp:
  321. labels:
  322. app.jumpserver.org/name: jms-xrdp
  323. config:
  324. log:
  325. level: ERROR
  326. replicaCount: 1
  327. image:
  328. registry: registry.fit2cloud.com
  329. repository: jumpserver/xrdp
  330. tag: v2.13.2
  331. pullPolicy: IfNotPresent
  332. command: []
  333. env: []
  334. livenessProbe:
  335. failureThreshold: 30
  336. tcpSocket:
  337. port: rdp
  338. readinessProbe:
  339. failureThreshold: 30
  340. tcpSocket:
  341. port: rdp
  342. podSecurityContext: {}
  343. # fsGroup: 2000
  344. securityContext: {}
  345. # capabilities:
  346. # drop:
  347. # - ALL
  348. # readOnlyRootFilesystem: true
  349. # runAsNonRoot: true
  350. # runAsUser: 1000
  351. service:
  352. type: ClusterIP
  353. rdp:
  354. port: 3389
  355. resources: {}
  356. # We usually recommend not to specify default resources and to leave this as a conscious
  357. # choice for the user. This also increases chances charts run on environments with little
  358. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  359. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  360. # limits:
  361. # cpu: 100m
  362. # memory: 128Mi
  363. # requests:
  364. # cpu: 100m
  365. # memory: 128Mi
  366. persistence:
  367. storageClassName: jumpserver-data
  368. accessModes:
  369. - ReadWriteMany
  370. size: 10Gi
  371. # annotations: {}
  372. finalizers:
  373. - kubernetes.io/pvc-protection
  374. volumeMounts: []
  375. volumes: []
  376. nodeSelector: {}
  377. tolerations: []
  378. affinity: {}
  379. web:
  380. enabled: true
  381. labels:
  382. app.jumpserver.org/name: jms-web
  383. replicaCount: 1
  384. image:
  385. registry: docker.io
  386. repository: jumpserver/web
  387. tag: v2.13.2
  388. pullPolicy: IfNotPresent
  389. command: []
  390. env: []
  391. livenessProbe:
  392. failureThreshold: 30
  393. httpGet:
  394. path: /api/health/
  395. port: web
  396. readinessProbe:
  397. failureThreshold: 30
  398. httpGet:
  399. path: /api/health/
  400. port: web
  401. podSecurityContext: {}
  402. # fsGroup: 2000
  403. securityContext: {}
  404. # capabilities:
  405. # drop:
  406. # - ALL
  407. # readOnlyRootFilesystem: true
  408. # runAsNonRoot: true
  409. # runAsUser: 1000
  410. service:
  411. type: ClusterIP
  412. web:
  413. port: 80
  414. resources: {}
  415. # We usually recommend not to specify default resources and to leave this as a conscious
  416. # choice for the user. This also increases chances charts run on environments with little
  417. # resources, such as Minikube. If you do want to specify resources, uncomment the following
  418. # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  419. # limits:
  420. # cpu: 100m
  421. # memory: 128Mi
  422. # requests:
  423. # cpu: 100m
  424. # memory: 128Mi
  425. persistence:
  426. storageClassName: jumpserver-data
  427. accessModes:
  428. - ReadWriteMany
  429. size: 1Gi
  430. # annotations: {}
  431. finalizers:
  432. - kubernetes.io/pvc-protection
  433. volumeMounts: []
  434. volumes: []
  435. nodeSelector: {}
  436. tolerations: []
  437. affinity: {}
  1. # 安装
  2. helm install jumpserver ./ -n default
  3. # 卸载
  4. helm uninstall jumpserver -n default
  5. # 查看
  6. helm list -n default

源码部署

Allinone

后续的使用请参考 安全建议 快速入门