安装文档

说明

全新安装的 Linux(内核推荐大于 4.0)
需要连接 互联网
使用 root 用户执行

可以使用由 华为云 提供的容器镜像服务 ❤

区域镜像仓库地址配置文件 /opt/jumpserver/config/config.txtKubernetes values.yaml
华北-北京一swr.cn-north-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-1.myhuaweicloud.comrepository: swr.cn-north-1.myhuaweicloud.com
华北-北京四swr.cn-north-4.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-4.myhuaweicloud.comrepository: swr.cn-north-4.myhuaweicloud.com
华南-广州swr.cn-south-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.comrepository: swr.cn-south-1.myhuaweicloud.com
华东-上海一swr.cn-east-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-east-3.myhuaweicloud.comrepository: swr.cn-east-3.myhuaweicloud.com
亚太-香港swr.ap-southeast-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-1.myhuaweicloud.comrepository: swr.ap-southeast-1.myhuaweicloud.com
亚太-新加坡swr.ap-southeast-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-3.myhuaweicloud.comrepository: swr.ap-southeast-3.myhuaweicloud.com

安装方式

外置环境要求

  • 推荐使用外置 数据库 和 Redis，方便日后扩展升级
DBVersionCacheVersion
MySQL>= 5.7Redis>= 5.0
MariaDB>= 10.2

一键部署

  1. # 默认会安装到 /opt/jumpserver-installer-v2.17.2 目录
  2. curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.17.2/quick_start.sh | bash
  3. cd /opt/jumpserver-installer-v2.17.2
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.17.2
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

手动部署

  1. cd /opt
  2. wget https://github.com/jumpserver/installer/releases/download/v2.17.2/jumpserver-installer-v2.17.2.tar.gz
  3. tar -xf jumpserver-installer-v2.17.2.tar.gz
  4. cd jumpserver-installer-v2.17.2
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  7. VOLUME_DIR=/opt/jumpserver
  8. DOCKER_DIR=/var/lib/docker
  9. SECRET_KEY=
  10. BOOTSTRAP_TOKEN=
  11. LOG_LEVEL=ERROR
  13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  14. USE_EXTERNAL_MYSQL=0
  15. DB_HOST=mysql
  16. DB_PORT=3306
  17. DB_USER=root
  18. DB_PASSWORD=
  19. DB_NAME=jumpserver
  21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  22. USE_EXTERNAL_REDIS=0
  23. REDIS_HOST=redis
  24. REDIS_PORT=6379
  25. REDIS_PASSWORD=
  27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  28. COMPOSE_PROJECT_NAME=jms
  29. COMPOSE_HTTP_TIMEOUT=3600
  30. DOCKER_CLIENT_TIMEOUT=3600
  31. DOCKER_SUBNET=192.168.250.0/24
  33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  34. USE_IPV6=0
  35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  38. HTTP_PORT=80
  39. SSH_PORT=2222
  40. RDP_PORT=3389
  42. USE_LB=0
  43. HTTPS_PORT=443
  45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  46. USE_TASK=1
  48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  49. USE_XPACK=0
  51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  52. # SESSION_COOKIE_AGE=86400
  53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  55. # Koko Lion XRDP 组件配置
  56. CORE_HOST=http://core:8080
  58. # 额外的配置
  59. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.17.2
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

离线部署(amd64)

从飞致云社区 下载最新的 linux/amd64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.17.2-amd64-84.tar.gz
  3. cd jumpserver-offline-installer-v2.17.2-amd64-84
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  7. VOLUME_DIR=/opt/jumpserver
  8. DOCKER_DIR=/var/lib/docker
  9. SECRET_KEY=
  10. BOOTSTRAP_TOKEN=
  11. LOG_LEVEL=ERROR
  13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  14. USE_EXTERNAL_MYSQL=0
  15. DB_HOST=mysql
  16. DB_PORT=3306
  17. DB_USER=root
  18. DB_PASSWORD=
  19. DB_NAME=jumpserver
  21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  22. USE_EXTERNAL_REDIS=0
  23. REDIS_HOST=redis
  24. REDIS_PORT=6379
  25. REDIS_PASSWORD=
  27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  28. COMPOSE_PROJECT_NAME=jms
  29. COMPOSE_HTTP_TIMEOUT=3600
  30. DOCKER_CLIENT_TIMEOUT=3600
  31. DOCKER_SUBNET=192.168.250.0/24
  33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  34. USE_IPV6=0
  35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  38. HTTP_PORT=80
  39. SSH_PORT=2222
  40. RDP_PORT=3389
  42. USE_LB=0
  43. HTTPS_PORT=443
  45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  46. USE_TASK=1
  48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  49. USE_XPACK=0
  51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  52. # SESSION_COOKIE_AGE=86400
  53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  55. # Koko Lion XRDP 组件配置
  56. CORE_HOST=http://core:8080
  58. # 额外的配置
  59. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.17.2
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

离线部署(arm64)

从飞致云社区 下载最新的 linux/arm64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.17.2-arm64-84.tar.gz
  3. cd jumpserver-offline-installer-v2.17.2-arm64-84
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
  7. VOLUME_DIR=/opt/jumpserver
  8. DOCKER_DIR=/var/lib/docker
  9. SECRET_KEY=
  10. BOOTSTRAP_TOKEN=
  11. LOG_LEVEL=ERROR
  13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  14. USE_EXTERNAL_MYSQL=0
  15. DB_HOST=mysql
  16. DB_PORT=3306
  17. DB_USER=root
  18. DB_PASSWORD=
  19. DB_NAME=jumpserver
  21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  22. USE_EXTERNAL_REDIS=0
  23. REDIS_HOST=redis
  24. REDIS_PORT=6379
  25. REDIS_PASSWORD=
  27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  28. COMPOSE_PROJECT_NAME=jms
  29. COMPOSE_HTTP_TIMEOUT=3600
  30. DOCKER_CLIENT_TIMEOUT=3600
  31. DOCKER_SUBNET=192.168.250.0/24
  33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  34. USE_IPV6=0
  35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
  37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
  38. HTTP_PORT=80
  39. SSH_PORT=2222
  40. RDP_PORT=3389
  42. USE_LB=0
  43. HTTPS_PORT=443
  45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  46. USE_TASK=1
  48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  49. USE_XPACK=0
  51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
  52. # SESSION_COOKIE_AGE=86400
  53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
  55. # Koko Lion XRDP 组件配置
  56. CORE_HOST=http://core:8080
  58. ## Lion 开启字体平滑
  59. JUMPSERVER_ENABLE_FONT_SMOOTHING=true
  61. ## Nginx 文件上传大小
  62. CLIENT_MAX_BODY_SIZE=4096m
  64. ## 终端使用宿主 HOSTNAME 标识
  65. SERVER_HOSTNAME=${HOSTNAME}
  67. # 额外的配置
  68. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.17.2
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

Kubernetes

  1. helm repo add jumpserver https://jumpserver.github.io/helm-charts
  2. helm repo list
  3. vi values.yaml
  1. # 模板 https://github.com/jumpserver/helm-charts/blob/main/charts/jumpserver/values.yaml
  2. # Default values for jumpserver.
  3. # This is a YAML-formatted file.
  4. # Declare variables to be passed into your templates.
  6. nameOverride: ""
  7. fullnameOverride: ""
  9. ## @param global.imageRegistry Global Docker image registry
  10. ## @param global.imagePullSecrets Global Docker registry secret names as an array
  11. ## @param global.storageClass Global StorageClass for Persistent Volume(s)
  12. ## @param global.redis.password Global Redis™ password (overrides `auth.password`)
  13. ##
  14. global:
  15.   imageRegistry: "docker.io"    # 国内可以使用华为云加速 swr.cn-south-1.myhuaweicloud.com
  16.   imageTag: v2.16.3             # 版本号
  17.   ## E.g.
  18.   #  imagePullSecrets:
  19.   #  - myRegistryKeySecretName
  20.   ##
  21.   imagePullSecrets: []
  22.       # - name: yourSecretKey
  23.   storageClass: ""              # NFS SC
  25. ## If the Redis database included in the chart is disabled, JumpServer will
  26. ## use below parameters to connect to an external Redis server.
  27. ##
  28. externalDatabase:               # 数据库相关设置
  29.   engine: mysql
  30.   host: localhost
  31.   port: 3306
  32.   user: root
  33.   password: ""
  34.   database: jumpserver
  36. ## If the MySQL database included in the chart is disabled, JumpServer will
  37. ## use below parameters to connect to an external MySQL server.
  38. ##
  39. externalRedis:                  # Redis 设置
  40.   host: localhost
  41.   port: 6379
  42.   password: ""
  44. serviceAccount:
  45.   # Specifies whether a service account should be created
  46.   create: false
  47.   # The name of the service account to use.
  48.   # If not set and create is true, a name is generated using the fullname template
  49.   name:
  51. ingress:
  52.   enabled: true
  53.   annotations:
  54.     # kubernetes.io/tls-acme: "true"
  55.     compute-full-forwarded-for: "true"
  56.     use-forwarded-headers: "true"
  57.     kubernetes.io/ingress.class: nginx
  58.     nginx.ingress.kubernetes.io/configuration-snippet: |
  59.        proxy_set_header Upgrade "websocket";
  60.        proxy_set_header Connection "Upgrade";
  61.   hosts:
  62.     - "test.jumpserver.org"                 # 对外域名
  63.   tls: []
  64.   #  - secretName: chart-example-tls
  65.   #    hosts:
  66.   #      - chart-example.local
  68. core:
  69.   enabled: true
  71.   labels:
  72.     app.jumpserver.org/name: jms-core
  74.   config:
  75.     # Generate a new random secret key by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
  76.     secretKey: ""                            # 加密敏感信息的 secret_key, 长度推荐大于 50 位
  77.     # Generate a new random bootstrap token by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
  78.     bootstrapToken: ""                       # 组件认证使用的 token, 长度推荐大于 24 位
  79.     # Enabled it for debug
  80.     debug: false
  81.     log:
  82.       level: ERROR
  84.   replicaCount: 1
  86.   image:
  87.     registry: docker.io
  88.     repository: jumpserver/core
  89.     tag: v2.13.2
  90.     pullPolicy: IfNotPresent
  92.   command: []
  94.   env: []
  96.   livenessProbe:
  97.     failureThreshold: 30
  98.     httpGet:
  99.       path: /api/health/
  100.       port: web
  102.   readinessProbe:
  103.     failureThreshold: 30
  104.     httpGet:
  105.       path: /api/health/
  106.       port: web
  108.   podSecurityContext: {}
  109.     # fsGroup: 2000
  111.   securityContext: {}
  112.     # capabilities:
  113.     #   drop:
  114.     #   - ALL
  115.     # readOnlyRootFilesystem: true
  116.     # runAsNonRoot: true
  117.     # runAsUser: 1000
  119.   service:
  120.     type: ClusterIP
  121.     web:
  122.       port: 8080
  123.     ws:
  124.       port: 8070
  126.   resources: {}
  127.     # We usually recommend not to specify default resources and to leave this as a conscious
  128.     # choice for the user. This also increases chances charts run on environments with little
  129.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  130.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  131.     # limits:
  132.     #   cpu: 1000m
  133.     #   memory: 2048Mi
  134.     # requests:
  135.     #   cpu: 500m
  136.     #   memory: 1024Mi
  138.   persistence:
  139.     storageClassName: jumpserver-data
  140.     accessModes:
  141.       - ReadWriteMany
  142.     size: 10Gi
  143.     # annotations: {}
  144.     finalizers:
  145.       - kubernetes.io/pvc-protection
  146.     # subPath: ""
  147.     # existingClaim:
  149.   volumeMounts: []
  151.   volumes: []
  153.   nodeSelector: {}
  155.   tolerations: []
  157.   affinity: {}
  159. koko:
  160.   enabled: true
  162.   labels:
  163.     app.jumpserver.org/name: jms-koko
  165.   config:
  166.     log:
  167.       level: ERROR
  169.   replicaCount: 1
  171.   image:
  172.     registry: docker.io
  173.     repository: jumpserver/koko
  174.     tag: v2.13.2
  175.     pullPolicy: IfNotPresent
  177.   command: []
  179.   env: []
  181.   livenessProbe:
  182.     failureThreshold: 30
  183.     httpGet:
  184.       path: /koko/health/
  185.       port: web
  187.   readinessProbe:
  188.     failureThreshold: 30
  189.     httpGet:
  190.       path: /koko/health/
  191.       port: web
  193.   podSecurityContext: {}
  194.     # fsGroup: 2000
  196.   securityContext:
  197.     privileged: true
  198.     # capabilities:
  199.     #   drop:
  200.     #   - ALL
  201.     # readOnlyRootFilesystem: true
  202.     # runAsNonRoot: true
  203.     # runAsUser: 1000
  205.   service:
  206.     type: ClusterIP
  207.     web:
  208.       port: 5000
  209.     ssh:
  210.       port: 2222
  212.   resources: {}
  213.     # We usually recommend not to specify default resources and to leave this as a conscious
  214.     # choice for the user. This also increases chances charts run on environments with little
  215.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  216.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  217.     # limits:
  218.     #   cpu: 100m
  219.     #   memory: 128Mi
  220.     # requests:
  221.     #   cpu: 100m
  222.     #   memory: 128Mi
  224.   persistence:
  225.     storageClassName: jumpserver-data
  226.     accessModes:
  227.       - ReadWriteMany
  228.     size: 10Gi
  229.     # annotations: {}
  230.     finalizers:
  231.       - kubernetes.io/pvc-protection
  233.   volumeMounts: []
  235.   volumes: []
  237.   nodeSelector: {}
  239.   tolerations: []
  241.   affinity: {}
  243. lion:
  244.   enabled: true
  246.   labels:
  247.     app.jumpserver.org/name: jms-lion
  249.   config:
  250.     log:
  251.       level: ERROR
  253.   replicaCount: 1
  255.   image:
  256.     registry: docker.io
  257.     repository: jumpserver/lion
  258.     tag: v2.13.2
  259.     pullPolicy: IfNotPresent
  261.   command: []
  263.   env: []
  265.   livenessProbe:
  266.     failureThreshold: 30
  267.     httpGet:
  268.       path: /lion/health/
  269.       port: web
  271.   readinessProbe:
  272.     failureThreshold: 30
  273.     httpGet:
  274.       path: /lion/health/
  275.       port: web
  277.   podSecurityContext: {}
  278.     # fsGroup: 2000
  280.   securityContext: {}
  281.     # capabilities:
  282.     #   drop:
  283.     #   - ALL
  284.     # readOnlyRootFilesystem: true
  285.     # runAsNonRoot: true
  286.     # runAsUser: 1000
  288.   service:
  289.     type: ClusterIP
  290.     web:
  291.       port: 8081
  293.   resources: {}
  294.     # We usually recommend not to specify default resources and to leave this as a conscious
  295.     # choice for the user. This also increases chances charts run on environments with little
  296.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  297.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  298.     # limits:
  299.     #   cpu: 100m
  300.     #   memory: 512Mi
  301.     # requests:
  302.     #   cpu: 100m
  303.     #   memory: 512Mi
  305.   persistence:
  306.     storageClassName: jumpserver-data
  307.     accessModes:
  308.       - ReadWriteMany
  309.     size: 10Gi
  310.     # annotations: {}
  311.     finalizers:
  312.       - kubernetes.io/pvc-protection
  314.   volumeMounts: []
  316.   volumes: []
  318.   nodeSelector: {}
  320.   tolerations: []
  322.   affinity: {}
  324. xpack:
  325.   enabled: false      # 企业版本打开此选项
  327. omnidb:
  328.   labels:
  329.     app.jumpserver.org/name: jms-omnidb
  331.   config:
  332.     log:
  333.       level: ERROR
  335.   replicaCount: 1
  337.   image:
  338.     registry: registry.fit2cloud.com
  339.     repository: jumpserver/omnidb
  340.     tag: v2.13.2
  341.     pullPolicy: IfNotPresent
  343.   command: []
  345.   env: []
  347.   livenessProbe:
  348.     failureThreshold: 30
  349.     tcpSocket:
  350.       port: web
  352.   readinessProbe:
  353.     failureThreshold: 30
  354.     tcpSocket:
  355.       port: web
  357.   podSecurityContext: {}
  358.     # fsGroup: 2000
  360.   securityContext: {}
  361.     # capabilities:
  362.     #   drop:
  363.     #   - ALL
  364.     # readOnlyRootFilesystem: true
  365.     # runAsNonRoot: true
  366.     # runAsUser: 1000
  368.   service:
  369.     type: ClusterIP
  370.     web:
  371.       port: 8082
  372.     ws:
  373.       port: 8071
  375.   resources: {}
  376.     # We usually recommend not to specify default resources and to leave this as a conscious
  377.     # choice for the user. This also increases chances charts run on environments with little
  378.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  379.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  380.     # limits:
  381.     #   cpu: 100m
  382.     #   memory: 128Mi
  383.     # requests:
  384.     #   cpu: 100m
  385.     #   memory: 128Mi
  387.   persistence:
  388.     storageClassName: jumpserver-data
  389.     accessModes:
  390.       - ReadWriteMany
  391.     size: 10Gi
  392.     # annotations: {}
  393.     finalizers:
  394.       - kubernetes.io/pvc-protection
  396.   volumeMounts: []
  398.   volumes: []
  400.   nodeSelector: {}
  402.   tolerations: []
  404.   affinity: {}
  406. xrdp:
  407.   labels:
  408.     app.jumpserver.org/name: jms-xrdp
  410.   config:
  411.     log:
  412.       level: ERROR
  414.   replicaCount: 1
  416.   image:
  417.     registry: registry.fit2cloud.com
  418.     repository: jumpserver/xrdp
  419.     tag: v2.13.2
  420.     pullPolicy: IfNotPresent
  422.   command: []
  424.   env: []
  426.   livenessProbe:
  427.     failureThreshold: 30
  428.     tcpSocket:
  429.       port: rdp
  431.   readinessProbe:
  432.     failureThreshold: 30
  433.     tcpSocket:
  434.       port: rdp
  436.   podSecurityContext: {}
  437.     # fsGroup: 2000
  439.   securityContext: {}
  440.     # capabilities:
  441.     #   drop:
  442.     #   - ALL
  443.     # readOnlyRootFilesystem: true
  444.     # runAsNonRoot: true
  445.     # runAsUser: 1000
  447.   service:
  448.     type: ClusterIP
  449.     rdp:
  450.       port: 3389
  452.   resources: {}
  453.     # We usually recommend not to specify default resources and to leave this as a conscious
  454.     # choice for the user. This also increases chances charts run on environments with little
  455.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  456.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  457.     # limits:
  458.     #   cpu: 100m
  459.     #   memory: 128Mi
  460.     # requests:
  461.     #   cpu: 100m
  462.     #   memory: 128Mi
  464.   persistence:
  465.     storageClassName: jumpserver-data
  466.     accessModes:
  467.       - ReadWriteMany
  468.     size: 10Gi
  469.     # annotations: {}
  470.     finalizers:
  471.       - kubernetes.io/pvc-protection
  473.   volumeMounts: []
  475.   volumes: []
  477.   nodeSelector: {}
  479.   tolerations: []
  481.   affinity: {}
  483. web:
  484.   enabled: true
  486.   labels:
  487.     app.jumpserver.org/name: jms-web
  489.   replicaCount: 1
  491.   image:
  492.     registry: docker.io
  493.     repository: jumpserver/web
  494.     tag: v2.13.2
  495.     pullPolicy: IfNotPresent
  497.   command: []
  499.   env: []
  501.   livenessProbe:
  502.     failureThreshold: 30
  503.     httpGet:
  504.       path: /api/health/
  505.       port: web
  507.   readinessProbe:
  508.     failureThreshold: 30
  509.     httpGet:
  510.       path: /api/health/
  511.       port: web
  513.   podSecurityContext: {}
  514.     # fsGroup: 2000
  516.   securityContext: {}
  517.     # capabilities:
  518.     #   drop:
  519.     #   - ALL
  520.     # readOnlyRootFilesystem: true
  521.     # runAsNonRoot: true
  522.     # runAsUser: 1000
  524.   service:
  525.     type: ClusterIP
  526.     web:
  527.       port: 80
  529.   resources: {}
  530.     # We usually recommend not to specify default resources and to leave this as a conscious
  531.     # choice for the user. This also increases chances charts run on environments with little
  532.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  533.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  534.     # limits:
  535.     #   cpu: 100m
  536.     #   memory: 128Mi
  537.     # requests:
  538.     #   cpu: 100m
  539.     #   memory: 128Mi
  541.   persistence:
  542.     storageClassName: jumpserver-data
  543.     accessModes:
  544.       - ReadWriteMany
  545.     size: 1Gi
  546.     # annotations: {}
  547.     finalizers:
  548.       - kubernetes.io/pvc-protection
  550.   volumeMounts: []
  552.   volumes: []
  554.   nodeSelector: {}
  556.   tolerations: []
  558.   affinity: {}
  1. # 安装
  2. helm install jms-k8s jumpserver/jumpserver -n default -f values.yaml
  4. # 卸载
  5. helm uninstall jms-k8s -n default

源码部署

Allinone

更多内容参考 https 配置 快速入门