安装文档

    全新安装的 Linux(内核推荐大于 4.0)
    需要连接 互联网
    使用 root 用户执行

    可以使用由 华为云 提供的容器镜像服务

    外置环境要求

    • 推荐使用外置 数据库 和 Redis，方便日后扩展升级
    DBVersionCacheVersion
    MySQL>= 5.7Redis>= 5.0
    MariaDB>= 10.2
    1. cd /opt/jumpserver-installer-v2.18.2
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h

    手动部署

    1. cd /opt
    2. wget https://github.com/jumpserver/installer/releases/download/v2.18.2/jumpserver-installer-v2.18.2.tar.gz
    3. tar -xf jumpserver-installer-v2.18.2.tar.gz
    4. cd jumpserver-installer-v2.18.2
    1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
    2. cat config-example.txt
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    7. VOLUME_DIR=/opt/jumpserver
    8. DOCKER_DIR=/var/lib/docker
    9. SECRET_KEY=
    10. BOOTSTRAP_TOKEN=
    11. LOG_LEVEL=ERROR
    13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
    14. USE_EXTERNAL_MYSQL=0
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
    22. USE_EXTERNAL_REDIS=0
    23. REDIS_HOST=redis
    24. REDIS_PORT=6379
    25. REDIS_PASSWORD=
    27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
    28. COMPOSE_PROJECT_NAME=jms
    29. COMPOSE_HTTP_TIMEOUT=3600
    30. DOCKER_CLIENT_TIMEOUT=3600
    31. DOCKER_SUBNET=192.168.250.0/24
    33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    34. USE_IPV6=0
    35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
    37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
    38. HTTP_PORT=80
    39. SSH_PORT=2222
    40. RDP_PORT=3389
    42. USE_LB=0
    43. HTTPS_PORT=443
    45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    46. USE_TASK=1
    48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
    49. USE_XPACK=0
    51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
    52. # SESSION_COOKIE_AGE=86400
    53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
    55. # Koko Lion XRDP 组件配置
    56. CORE_HOST=http://core:8080
    58. # 额外的配置
    59. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt

    离线部署(amd64)

    从飞致云社区 下载最新的 linux/amd64 离线包, 并上传到部署服务器的 /opt 目录

    1. cd /opt
    2. tar -xf jumpserver-offline-installer-v2.18.2-amd64-114.tar.gz
    3. cd jumpserver-offline-installer-v2.18.2-amd64-114
    1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
    2. cat config-example.txt
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    7. VOLUME_DIR=/opt/jumpserver
    8. DOCKER_DIR=/var/lib/docker
    9. SECRET_KEY=
    10. BOOTSTRAP_TOKEN=
    11. LOG_LEVEL=ERROR
    13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
    14. USE_EXTERNAL_MYSQL=0
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
    22. USE_EXTERNAL_REDIS=0
    23. REDIS_HOST=redis
    24. REDIS_PORT=6379
    25. REDIS_PASSWORD=
    27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
    28. COMPOSE_PROJECT_NAME=jms
    29. COMPOSE_HTTP_TIMEOUT=3600
    30. DOCKER_CLIENT_TIMEOUT=3600
    31. DOCKER_SUBNET=192.168.250.0/24
    33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    34. USE_IPV6=0
    35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
    37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
    38. HTTP_PORT=80
    39. SSH_PORT=2222
    40. RDP_PORT=3389
    42. USE_LB=0
    43. HTTPS_PORT=443
    45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    46. USE_TASK=1
    48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
    49. USE_XPACK=0
    51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
    52. # SESSION_COOKIE_AGE=86400
    53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
    55. # Koko Lion XRDP 组件配置
    56. CORE_HOST=http://core:8080
    58. # 额外的配置
    59. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd /opt/jumpserver-installer-v2.18.2
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h

    从飞致云社区 , 并上传到部署服务器的 /opt 目录

    1. cd /opt
    2. tar -xf jumpserver-offline-installer-v2.18.2-arm64-114.tar.gz
    3. cd jumpserver-offline-installer-v2.18.2-arm64-114
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    7. VOLUME_DIR=/opt/jumpserver
    8. DOCKER_DIR=/var/lib/docker
    9. SECRET_KEY=
    10. BOOTSTRAP_TOKEN=
    11. LOG_LEVEL=ERROR
    13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
    14. USE_EXTERNAL_MYSQL=0
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
    22. USE_EXTERNAL_REDIS=0
    23. REDIS_HOST=redis
    24. REDIS_PORT=6379
    25. REDIS_PASSWORD=
    27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
    28. COMPOSE_PROJECT_NAME=jms
    29. COMPOSE_HTTP_TIMEOUT=3600
    30. DOCKER_CLIENT_TIMEOUT=3600
    31. DOCKER_SUBNET=192.168.250.0/24
    33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    34. USE_IPV6=0
    35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
    37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
    38. HTTP_PORT=80
    39. SSH_PORT=2222
    40. RDP_PORT=3389
    42. USE_LB=0
    43. HTTPS_PORT=443
    45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    46. USE_TASK=1
    48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
    49. USE_XPACK=0
    51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
    52. # SESSION_COOKIE_AGE=86400
    53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
    55. # Koko Lion XRDP 组件配置
    56. CORE_HOST=http://core:8080
    58. ## Lion 开启字体平滑
    59. JUMPSERVER_ENABLE_FONT_SMOOTHING=true
    61. ## Nginx 文件上传大小
    62. CLIENT_MAX_BODY_SIZE=4096m
    64. ## 终端使用宿主 HOSTNAME 标识
    65. SERVER_HOSTNAME=${HOSTNAME}
    67. # 额外的配置
    68. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd /opt/jumpserver-installer-v2.18.2
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h

    Kubernetes

    1. helm repo add jumpserver https://jumpserver.github.io/helm-charts
    2. helm repo list
    3. vi values.yaml
    1. # 模板 https://github.com/jumpserver/helm-charts/blob/main/charts/jumpserver/values.yaml
    2. # Default values for jumpserver.
    3. # This is a YAML-formatted file.
    4. # Declare variables to be passed into your templates.
    6. nameOverride: ""
    7. fullnameOverride: ""
    9. ## @param global.imageRegistry Global Docker image registry
    10. ## @param global.imagePullSecrets Global Docker registry secret names as an array
    11. ## @param global.storageClass Global StorageClass for Persistent Volume(s)
    12. ##
    14.   imageRegistry: "docker.io"    # 国内可以使用华为云加速 swr.cn-south-1.myhuaweicloud.com
    15.   imageTag: v2.16.3             # 版本号
    16.   ## E.g.
    17.   #  imagePullSecrets:
    18.   #  - myRegistryKeySecretName
    19.   ##
    20.   imagePullSecrets: []
    21.       # - name: yourSecretKey
    22.   storageClass: ""              # NFS SC
    24. ## If the Redis database included in the chart is disabled, JumpServer will
    25. ## use below parameters to connect to an external Redis server.
    26. ##
    27. externalDatabase:               # 数据库相关设置
    28.   engine: mysql
    29.   host: localhost
    30.   port: 3306
    31.   user: root
    32.   password: ""
    33.   database: jumpserver
    35. ## If the MySQL database included in the chart is disabled, JumpServer will
    36. ## use below parameters to connect to an external MySQL server.
    37. ##
    38. externalRedis:                  # Redis 设置
    39.   host: localhost
    40.   port: 6379
    41.   password: ""
    43. serviceAccount:
    44.   # Specifies whether a service account should be created
    45.   create: false
    46.   # The name of the service account to use.
    47.   # If not set and create is true, a name is generated using the fullname template
    48.   name:
    50. ingress:
    51.   enabled: true
    52.   annotations:
    53.     # kubernetes.io/tls-acme: "true"
    54.     compute-full-forwarded-for: "true"
    55.     use-forwarded-headers: "true"
    56.     kubernetes.io/ingress.class: nginx
    57.     nginx.ingress.kubernetes.io/configuration-snippet: |
    58.        proxy_set_header Upgrade "websocket";
    59.        proxy_set_header Connection "Upgrade";
    60.   hosts:
    61.     - "test.jumpserver.org"                 # 对外域名
    62.   tls: []
    63.   #  - secretName: chart-example-tls
    64.   #    hosts:
    65.   #      - chart-example.local
    67. core:
    68.   enabled: true
    70.   labels:
    71.     app.jumpserver.org/name: jms-core
    73.   config:
    74.     # Generate a new random secret key by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
    75.     secretKey: ""                            # 加密敏感信息的 secret_key, 长度推荐大于 50 位
    76.     # Generate a new random bootstrap token by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
    77.     bootstrapToken: ""                       # 组件认证使用的 token, 长度推荐大于 24 位
    78.     # Enabled it for debug
    79.     debug: false
    80.     log:
    81.       level: ERROR
    83.   replicaCount: 1
    85.   image:
    86.     registry: docker.io
    87.     repository: jumpserver/core
    88.     tag: v2.13.2
    89.     pullPolicy: IfNotPresent
    91.   command: []
    93.   env: []
    95.   livenessProbe:
    96.     failureThreshold: 30
    97.     httpGet:
    98.       path: /api/health/
    99.       port: web
    101.   readinessProbe:
    102.     failureThreshold: 30
    103.     httpGet:
    104.       path: /api/health/
    105.       port: web
    107.   podSecurityContext: {}
    108.     # fsGroup: 2000
    110.   securityContext: {}
    111.     # capabilities:
    112.     #   drop:
    113.     #   - ALL
    114.     # readOnlyRootFilesystem: true
    115.     # runAsNonRoot: true
    116.     # runAsUser: 1000
    118.   service:
    119.     type: ClusterIP
    120.     web:
    121.       port: 8080
    122.     ws:
    123.       port: 8070
    125.   resources: {}
    126.     # We usually recommend not to specify default resources and to leave this as a conscious
    127.     # choice for the user. This also increases chances charts run on environments with little
    128.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    129.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    130.     # limits:
    131.     #   cpu: 1000m
    132.     #   memory: 2048Mi
    133.     # requests:
    134.     #   cpu: 500m
    135.     #   memory: 1024Mi
    137.   persistence:
    138.     storageClassName: jumpserver-data
    139.     accessModes:
    140.       - ReadWriteMany
    141.     size: 10Gi
    142.     # annotations: {}
    143.     finalizers:
    144.       - kubernetes.io/pvc-protection
    145.     # subPath: ""
    146.     # existingClaim:
    148.   volumeMounts: []
    150.   volumes: []
    152.   nodeSelector: {}
    154.   tolerations: []
    156.   affinity: {}
    158. koko:
    159.   enabled: true
    161.   labels:
    162.     app.jumpserver.org/name: jms-koko
    164.   config:
    165.     log:
    166.       level: ERROR
    168.   replicaCount: 1
    170.   image:
    171.     registry: docker.io
    172.     repository: jumpserver/koko
    173.     tag: v2.13.2
    174.     pullPolicy: IfNotPresent
    176.   command: []
    178.   env: []
    180.   livenessProbe:
    181.     failureThreshold: 30
    182.     httpGet:
    183.       path: /koko/health/
    184.       port: web
    186.   readinessProbe:
    187.     failureThreshold: 30
    188.     httpGet:
    189.       path: /koko/health/
    190.       port: web
    192.   podSecurityContext: {}
    193.     # fsGroup: 2000
    195.   securityContext:
    196.     privileged: true
    197.     # capabilities:
    198.     #   drop:
    199.     #   - ALL
    200.     # readOnlyRootFilesystem: true
    201.     # runAsNonRoot: true
    202.     # runAsUser: 1000
    204.   service:
    205.     type: ClusterIP
    206.     web:
    207.       port: 5000
    208.     ssh:
    209.       port: 2222
    211.   resources: {}
    212.     # We usually recommend not to specify default resources and to leave this as a conscious
    213.     # choice for the user. This also increases chances charts run on environments with little
    214.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    215.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    216.     # limits:
    217.     #   cpu: 100m
    218.     #   memory: 128Mi
    219.     # requests:
    220.     #   cpu: 100m
    221.     #   memory: 128Mi
    223.   persistence:
    224.     storageClassName: jumpserver-data
    225.     accessModes:
    226.       - ReadWriteMany
    227.     size: 10Gi
    228.     # annotations: {}
    229.     finalizers:
    230.       - kubernetes.io/pvc-protection
    232.   volumeMounts: []
    234.   volumes: []
    236.   nodeSelector: {}
    238.   tolerations: []
    240.   affinity: {}
    242. lion:
    243.   enabled: true
    245.   labels:
    246.     app.jumpserver.org/name: jms-lion
    248.   config:
    249.     log:
    250.       level: ERROR
    252.   replicaCount: 1
    254.   image:
    255.     registry: docker.io
    256.     repository: jumpserver/lion
    257.     tag: v2.13.2
    258.     pullPolicy: IfNotPresent
    260.   command: []
    262.   env: []
    264.   livenessProbe:
    265.     failureThreshold: 30
    266.     httpGet:
    267.       path: /lion/health/
    268.       port: web
    270.   readinessProbe:
    271.     failureThreshold: 30
    272.     httpGet:
    273.       path: /lion/health/
    274.       port: web
    276.   podSecurityContext: {}
    277.     # fsGroup: 2000
    279.   securityContext: {}
    280.     # capabilities:
    281.     #   drop:
    282.     #   - ALL
    283.     # readOnlyRootFilesystem: true
    284.     # runAsNonRoot: true
    285.     # runAsUser: 1000
    287.     type: ClusterIP
    288.     web:
    289.       port: 8081
    291.   resources: {}
    292.     # We usually recommend not to specify default resources and to leave this as a conscious
    293.     # choice for the user. This also increases chances charts run on environments with little
    294.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    295.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    296.     # limits:
    297.     #   cpu: 100m
    298.     #   memory: 512Mi
    299.     # requests:
    300.     #   cpu: 100m
    301.     #   memory: 512Mi
    303.   persistence:
    304.     storageClassName: jumpserver-data
    305.     accessModes:
    306.       - ReadWriteMany
    307.     size: 10Gi
    308.     # annotations: {}
    309.     finalizers:
    310.       - kubernetes.io/pvc-protection
    312.   volumeMounts: []
    314.   volumes: []
    316.   nodeSelector: {}
    318.   tolerations: []
    320.   affinity: {}
    322. xpack:
    323.   enabled: false      # 企业版本打开此选项
    325. omnidb:
    326.   labels:
    327.     app.jumpserver.org/name: jms-omnidb
    329.   config:
    330.     log:
    331.       level: ERROR
    333.   replicaCount: 1
    335.   image:
    336.     registry: registry.fit2cloud.com
    337.     repository: jumpserver/omnidb
    338.     tag: v2.13.2
    339.     pullPolicy: IfNotPresent
    341.   command: []
    343.   env: []
    345.   livenessProbe:
    346.     failureThreshold: 30
    347.     tcpSocket:
    348.       port: web
    350.   readinessProbe:
    351.     failureThreshold: 30
    352.     tcpSocket:
    353.       port: web
    355.   podSecurityContext: {}
    356.     # fsGroup: 2000
    358.   securityContext: {}
    359.     # capabilities:
    360.     #   drop:
    361.     #   - ALL
    362.     # readOnlyRootFilesystem: true
    363.     # runAsNonRoot: true
    364.     # runAsUser: 1000
    366.   service:
    367.     type: ClusterIP
    368.     web:
    369.       port: 8082
    370.     ws:
    371.       port: 8071
    373.   resources: {}
    374.     # We usually recommend not to specify default resources and to leave this as a conscious
    375.     # choice for the user. This also increases chances charts run on environments with little
    376.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    377.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    378.     # limits:
    379.     #   cpu: 100m
    380.     #   memory: 128Mi
    381.     # requests:
    382.     #   cpu: 100m
    383.     #   memory: 128Mi
    385.   persistence:
    386.     storageClassName: jumpserver-data
    387.     accessModes:
    388.       - ReadWriteMany
    389.     size: 10Gi
    390.     # annotations: {}
    391.     finalizers:
    392.       - kubernetes.io/pvc-protection
    394.   volumeMounts: []
    396.   volumes: []
    398.   nodeSelector: {}
    400.   tolerations: []
    402.   affinity: {}
    404. xrdp:
    405.   labels:
    406.     app.jumpserver.org/name: jms-xrdp
    408.   config:
    409.     log:
    410.       level: ERROR
    412.   replicaCount: 1
    414.   image:
    415.     registry: registry.fit2cloud.com
    416.     repository: jumpserver/xrdp
    417.     tag: v2.13.2
    418.     pullPolicy: IfNotPresent
    420.   command: []
    422.   env: []
    424.   livenessProbe:
    425.     failureThreshold: 30
    426.     tcpSocket:
    427.       port: rdp
    429.   readinessProbe:
    430.     failureThreshold: 30
    431.     tcpSocket:
    432.       port: rdp
    434.   podSecurityContext: {}
    435.     # fsGroup: 2000
    437.   securityContext: {}
    438.     # capabilities:
    439.     #   drop:
    440.     #   - ALL
    441.     # readOnlyRootFilesystem: true
    442.     # runAsNonRoot: true
    443.     # runAsUser: 1000
    445.   service:
    446.     type: ClusterIP
    447.     rdp:
    448.       port: 3389
    450.   resources: {}
    451.     # We usually recommend not to specify default resources and to leave this as a conscious
    452.     # choice for the user. This also increases chances charts run on environments with little
    453.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    454.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    455.     # limits:
    456.     #   cpu: 100m
    457.     #   memory: 128Mi
    458.     # requests:
    459.     #   cpu: 100m
    460.     #   memory: 128Mi
    462.   persistence:
    463.     storageClassName: jumpserver-data
    464.     accessModes:
    465.       - ReadWriteMany
    466.     size: 10Gi
    467.     # annotations: {}
    468.     finalizers:
    469.       - kubernetes.io/pvc-protection
    471.   volumeMounts: []
    473.   volumes: []
    475.   nodeSelector: {}
    477.   tolerations: []
    479.   affinity: {}
    481. web:
    482.   enabled: true
    484.   labels:
    485.     app.jumpserver.org/name: jms-web
    487.   replicaCount: 1
    489.   image:
    490.     registry: docker.io
    491.     repository: jumpserver/web
    492.     tag: v2.13.2
    493.     pullPolicy: IfNotPresent
    495.   command: []
    497.   env: []
    499.   livenessProbe:
    500.     failureThreshold: 30
    501.     httpGet:
    502.       path: /api/health/
    503.       port: web
    505.   readinessProbe:
    506.     failureThreshold: 30
    507.     httpGet:
    508.       path: /api/health/
    509.       port: web
    511.   podSecurityContext: {}
    512.     # fsGroup: 2000
    514.   securityContext: {}
    515.     # capabilities:
    516.     #   drop:
    517.     #   - ALL
    518.     # readOnlyRootFilesystem: true
    519.     # runAsNonRoot: true
    520.     # runAsUser: 1000
    522.   service:
    523.     type: ClusterIP
    524.     web:
    525.       port: 80
    527.   resources: {}
    528.     # We usually recommend not to specify default resources and to leave this as a conscious
    529.     # choice for the user. This also increases chances charts run on environments with little
    530.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    531.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    532.     # limits:
    533.     #   cpu: 100m
    534.     #   memory: 128Mi
    535.     # requests:
    536.     #   cpu: 100m
    537.     #   memory: 128Mi
    539.   persistence:
    540.     storageClassName: jumpserver-data
    541.     accessModes:
    542.       - ReadWriteMany
    543.     size: 1Gi
    544.     # annotations: {}
    545.     finalizers:
    546.       - kubernetes.io/pvc-protection
    548.   volumeMounts: []
    550.   volumes: []
    552.   nodeSelector: {}
    554.   tolerations: []
    556.   affinity: {}
    1. # 安装
    2. helm install jms-k8s jumpserver/jumpserver -n default -f values.yaml
    5. helm uninstall jms-k8s -n default

    源码部署

    更多内容参考 快速入门