安装文档

    全新安装的 Linux
    需要连接 互联网
    使用 root 用户执行

    可以使用由 华为云 提供的容器镜像服务

    外置环境要求

    • 推荐使用外置 数据库 和 Redis，方便日后扩展升级
    DBVersionCacheVersion
    MySQL>= 5.7Redis>= 5.0
    MariaDB>= 10.2
    1. cd /opt/jumpserver-installer-v2.16.1
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h

    手动部署

    1. cd /opt
    2. wget https://github.com/jumpserver/installer/releases/download/v2.16.1/jumpserver-installer-v2.16.1.tar.gz
    3. tar -xf jumpserver-installer-v2.16.1.tar.gz
    4. cd jumpserver-installer-v2.16.1
    1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
    2. cat config-example.txt
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    7. VOLUME_DIR=/opt/jumpserver
    8. DOCKER_DIR=/var/lib/docker
    9. SECRET_KEY=
    10. BOOTSTRAP_TOKEN=
    11. LOG_LEVEL=ERROR
    13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
    14. USE_EXTERNAL_MYSQL=0
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
    22. USE_EXTERNAL_REDIS=0
    23. REDIS_HOST=redis
    24. REDIS_PORT=6379
    25. REDIS_PASSWORD=
    27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
    28. COMPOSE_PROJECT_NAME=jms
    29. COMPOSE_HTTP_TIMEOUT=3600
    30. DOCKER_CLIENT_TIMEOUT=3600
    31. DOCKER_SUBNET=192.168.250.0/24
    33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    34. USE_IPV6=0
    35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
    37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
    38. HTTP_PORT=80
    39. SSH_PORT=2222
    40. RDP_PORT=3389
    42. USE_LB=0
    43. HTTPS_PORT=443
    45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    46. USE_TASK=1
    48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
    49. USE_XPACK=0
    51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
    52. # SESSION_COOKIE_AGE=86400
    53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
    55. # Koko Lion XRDP 组件配置
    56. CORE_HOST=http://core:8080
    58. # 额外的配置
    59. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt

    离线部署(amd64)

    从飞致云社区 下载最新的 linux/amd64 离线包, 并上传到部署服务器的 /opt 目录

    1. cd /opt
    2. tar -xf jumpserver-offline-installer-v2.16.1-amd64-52.tar.gz
    3. cd jumpserver-offline-installer-v2.16.1-amd64-52
    1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
    2. cat config-example.txt
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    7. VOLUME_DIR=/opt/jumpserver
    8. DOCKER_DIR=/var/lib/docker
    9. SECRET_KEY=
    10. BOOTSTRAP_TOKEN=
    11. LOG_LEVEL=ERROR
    13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
    14. USE_EXTERNAL_MYSQL=0
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
    22. USE_EXTERNAL_REDIS=0
    23. REDIS_HOST=redis
    24. REDIS_PORT=6379
    25. REDIS_PASSWORD=
    27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
    28. COMPOSE_PROJECT_NAME=jms
    29. COMPOSE_HTTP_TIMEOUT=3600
    30. DOCKER_CLIENT_TIMEOUT=3600
    31. DOCKER_SUBNET=192.168.250.0/24
    33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    34. USE_IPV6=0
    35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
    37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
    38. HTTP_PORT=80
    39. SSH_PORT=2222
    40. RDP_PORT=3389
    42. USE_LB=0
    43. HTTPS_PORT=443
    45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    46. USE_TASK=1
    48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
    49. USE_XPACK=0
    51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
    52. # SESSION_COOKIE_AGE=86400
    53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
    55. # Koko Lion XRDP 组件配置
    56. CORE_HOST=http://core:8080
    58. # 额外的配置
    59. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd /opt/jumpserver-installer-v2.16.1
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h

    从飞致云社区 , 并上传到部署服务器的 /opt 目录

    1. cd /opt
    2. tar -xf jumpserver-offline-installer-v2.16.1-arm64-52.tar.gz
    3. cd jumpserver-offline-installer-v2.16.1-arm64-52
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    7. VOLUME_DIR=/opt/jumpserver
    8. DOCKER_DIR=/var/lib/docker
    9. SECRET_KEY=
    10. BOOTSTRAP_TOKEN=
    11. LOG_LEVEL=ERROR
    13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
    14. USE_EXTERNAL_MYSQL=0
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
    22. USE_EXTERNAL_REDIS=0
    23. REDIS_HOST=redis
    24. REDIS_PORT=6379
    25. REDIS_PASSWORD=
    27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
    28. COMPOSE_PROJECT_NAME=jms
    29. COMPOSE_HTTP_TIMEOUT=3600
    30. DOCKER_CLIENT_TIMEOUT=3600
    31. DOCKER_SUBNET=192.168.250.0/24
    33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    34. USE_IPV6=0
    35. DOCKER_SUBNET_IPV6=2001:db8:10::/64
    37. ## Nginx 配置, USE_LB=1 表示开启, 为 0 的情况下, HTTPS_PORT 定义不生效
    38. HTTP_PORT=80
    39. SSH_PORT=2222
    40. RDP_PORT=3389
    42. USE_LB=0
    43. HTTPS_PORT=443
    45. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    46. USE_TASK=1
    48. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
    49. USE_XPACK=0
    51. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
    52. # SESSION_COOKIE_AGE=86400
    53. SESSION_EXPIRE_AT_BROWSER_CLOSE=true
    55. # Koko Lion XRDP 组件配置
    56. CORE_HOST=http://core:8080
    58. # 额外的配置
    59. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd /opt/jumpserver-installer-v2.16.1
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h

    Kubernetes

    1. cd /opt
    2. git clone https://github.com/jumpserver/helm
    3. cd /opt/helm
    4. cat values.yaml
    1. # Default values for jumpserver.
    2. # This is a YAML-formatted file.
    3. # Declare variables to be passed into your templates.
    5. nameOverride: ""
    6. fullnameOverride: ""
    8. ## @param global.imageRegistry Global Docker image registry
    9. ## @param global.imagePullSecrets Global Docker registry secret names as an array
    10. ## @param global.storageClass Global StorageClass for Persistent Volume(s)
    11. ## @param global.redis.password Global Redis™ password (overrides `auth.password`)
    12. ##
    13. global:
    14.   imageRegistry: "docker.io"    # 国内可以使用华为云加速
    15.   ## E.g.
    16.   #  imagePullSecrets:
    17.   ##
    18.   imagePullSecrets: []
    21. ## If the Redis database included in the chart is disabled, JumpServer will
    22. ## use below parameters to connect to an external Redis server.
    23. ##
    24. externalDatabase:               # 数据库相关设置
    25.   engine: mysql
    26.   host: localhost
    27.   port: 3306
    28.   user: root
    29.   password: ""
    30.   database: jumpserver
    32. ## If the MySQL database included in the chart is disabled, JumpServer will
    33. ## use below parameters to connect to an external MySQL server.
    34. ##
    35. externalRedis:                  # Redis 设置
    36.   host: localhost
    37.   port: 6379
    38.   password: ""
    40. serviceAccount:
    41.   # Specifies whether a service account should be created
    42.   create: false
    43.   # The name of the service account to use.
    44.   # If not set and create is true, a name is generated using the fullname template
    45.   name:
    47. ingress:
    48.   enabled: true
    49.   annotations:
    50.     # kubernetes.io/tls-acme: "true"
    51.     compute-full-forwarded-for: "true"
    52.     use-forwarded-headers: "true"
    53.     kubernetes.io/ingress.class: nginx
    54.     nginx.ingress.kubernetes.io/configuration-snippet: |
    55.        proxy_set_header Upgrade "websocket";
    56.        proxy_set_header Connection "Upgrade";
    57.   hosts:
    58.     - "test.jumpserver.org"                 # 对外域名
    59.   tls: []
    60.   #  - secretName: chart-example-tls
    61.   #    hosts:
    62.   #      - chart-example.local
    64. core:
    65.   enabled: true
    67.   labels:
    68.     app.jumpserver.org/name: jms-core
    70.   config:
    71.     # Generate a new random secret key by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
    72.     secretKey: ""
    73.     # Generate a new random bootstrap token by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
    74.     bootstrapToken: ""
    75.     # Enabled it for debug
    76.     debug: false
    77.     log:
    78.       level: ERROR
    80.   replicaCount: 1
    82.   image:
    83.     registry: docker.io
    84.     repository: jumpserver/core
    85.     tag: v2.13.2
    86.     pullPolicy: IfNotPresent
    88.   command: []
    90.   env: []
    92.   livenessProbe:
    93.     failureThreshold: 30
    94.     httpGet:
    95.       path: /api/health/
    96.       port: web
    98.   readinessProbe:
    99.     failureThreshold: 30
    100.     httpGet:
    101.       path: /api/health/
    102.       port: web
    104.   podSecurityContext: {}
    105.     # fsGroup: 2000
    107.   securityContext: {}
    108.     # capabilities:
    109.     #   drop:
    110.     #   - ALL
    111.     # readOnlyRootFilesystem: true
    112.     # runAsNonRoot: true
    113.     # runAsUser: 1000
    115.   service:
    116.     type: ClusterIP
    117.     web:
    118.       port: 8080
    119.     ws:
    120.       port: 8070
    122.   resources: {}
    123.     # We usually recommend not to specify default resources and to leave this as a conscious
    124.     # choice for the user. This also increases chances charts run on environments with little
    125.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    126.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    127.     # limits:
    128.     #   cpu: 1000m
    129.     #   memory: 2048Mi
    130.     # requests:
    131.     #   cpu: 500m
    132.     #   memory: 1024Mi
    134.   persistence:
    135.     storageClassName: jumpserver-data
    136.     accessModes:
    137.       - ReadWriteMany
    138.     size: 10Gi
    139.     # annotations: {}
    140.     finalizers:
    141.       - kubernetes.io/pvc-protection
    142.     # subPath: ""
    143.     # existingClaim:
    145.   volumeMounts: []
    147.   volumes: []
    149.   nodeSelector: {}
    151.   tolerations: []
    153.   affinity: {}
    155. koko:
    156.   enabled: true
    158.   labels:
    159.     app.jumpserver.org/name: jms-koko
    161.   config:
    162.     log:
    163.       level: ERROR
    165.   replicaCount: 1
    167.   image:
    168.     registry: docker.io
    169.     repository: jumpserver/koko
    170.     tag: v2.13.2
    171.     pullPolicy: IfNotPresent
    173.   command: []
    175.   env: []
    177.   livenessProbe:
    178.     failureThreshold: 30
    179.     httpGet:
    180.       path: /koko/health/
    181.       port: web
    183.   readinessProbe:
    184.     failureThreshold: 30
    185.     httpGet:
    186.       path: /koko/health/
    187.       port: web
    189.   podSecurityContext: {}
    190.     # fsGroup: 2000
    192.   securityContext:
    193.     privileged: true
    194.     # capabilities:
    195.     #   drop:
    196.     #   - ALL
    197.     # readOnlyRootFilesystem: true
    198.     # runAsNonRoot: true
    199.     # runAsUser: 1000
    201.   service:
    202.     type: ClusterIP
    203.     web:
    204.       port: 5000
    205.     ssh:
    206.       port: 2222
    208.   resources: {}
    209.     # We usually recommend not to specify default resources and to leave this as a conscious
    210.     # choice for the user. This also increases chances charts run on environments with little
    211.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    212.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    213.     # limits:
    214.     #   cpu: 100m
    215.     #   memory: 128Mi
    216.     # requests:
    217.     #   cpu: 100m
    218.     #   memory: 128Mi
    220.   persistence:
    221.     storageClassName: jumpserver-data
    222.     accessModes:
    223.       - ReadWriteMany
    224.     size: 10Gi
    225.     # annotations: {}
    226.     finalizers:
    227.       - kubernetes.io/pvc-protection
    229.   volumeMounts: []
    231.   volumes: []
    233.   nodeSelector: {}
    235.   tolerations: []
    237.   affinity: {}
    239. lion:
    240.   enabled: true
    242.   labels:
    243.     app.jumpserver.org/name: jms-lion
    245.   config:
    246.     log:
    247.       level: ERROR
    249.   replicaCount: 1
    251.   image:
    252.     registry: docker.io
    253.     repository: jumpserver/lion
    254.     tag: v2.13.2
    255.     pullPolicy: IfNotPresent
    257.   command: []
    259.   env: []
    261.   livenessProbe:
    262.     failureThreshold: 30
    263.     httpGet:
    264.       path: /lion/health/
    265.       port: web
    267.   readinessProbe:
    268.     failureThreshold: 30
    269.     httpGet:
    270.       path: /lion/health/
    271.       port: web
    273.   podSecurityContext: {}
    274.     # fsGroup: 2000
    276.   securityContext: {}
    277.     # capabilities:
    278.     #   drop:
    279.     #   - ALL
    280.     # readOnlyRootFilesystem: true
    281.     # runAsNonRoot: true
    282.     # runAsUser: 1000
    284.   service:
    285.     type: ClusterIP
    286.     web:
    287.       port: 8081
    289.     # We usually recommend not to specify default resources and to leave this as a conscious
    291.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    292.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    293.     # limits:
    294.     #   cpu: 100m
    295.     #   memory: 512Mi
    296.     # requests:
    297.     #   cpu: 100m
    298.     #   memory: 512Mi
    300.   persistence:
    301.     storageClassName: jumpserver-data
    302.     accessModes:
    303.       - ReadWriteMany
    304.     size: 10Gi
    305.     # annotations: {}
    306.     finalizers:
    307.       - kubernetes.io/pvc-protection
    309.   volumeMounts: []
    311.   volumes: []
    313.   nodeSelector: {}
    315.   tolerations: []
    317.   affinity: {}
    319. xpack:
    320.   enabled: false      # 企业版本打开此选项
    322. omnidb:
    323.   labels:
    324.     app.jumpserver.org/name: jms-omnidb
    326.   config:
    327.     log:
    328.       level: ERROR
    330.   replicaCount: 1
    332.   image:
    333.     registry: registry.fit2cloud.com
    334.     repository: jumpserver/omnidb
    335.     tag: v2.13.2
    336.     pullPolicy: IfNotPresent
    338.   command: []
    340.   env: []
    342.   livenessProbe:
    343.     failureThreshold: 30
    344.     tcpSocket:
    345.       port: web
    347.   readinessProbe:
    348.     failureThreshold: 30
    349.     tcpSocket:
    350.       port: web
    352.   podSecurityContext: {}
    353.     # fsGroup: 2000
    355.   securityContext: {}
    356.     # capabilities:
    357.     #   drop:
    358.     #   - ALL
    359.     # readOnlyRootFilesystem: true
    360.     # runAsNonRoot: true
    361.     # runAsUser: 1000
    363.   service:
    364.     type: ClusterIP
    365.     web:
    366.       port: 8082
    367.     ws:
    368.       port: 8071
    370.   resources: {}
    371.     # We usually recommend not to specify default resources and to leave this as a conscious
    372.     # choice for the user. This also increases chances charts run on environments with little
    373.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    374.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    375.     # limits:
    376.     #   cpu: 100m
    377.     #   memory: 128Mi
    378.     # requests:
    379.     #   cpu: 100m
    380.     #   memory: 128Mi
    382.   persistence:
    383.     storageClassName: jumpserver-data
    384.     accessModes:
    385.       - ReadWriteMany
    386.     size: 10Gi
    387.     # annotations: {}
    388.     finalizers:
    389.       - kubernetes.io/pvc-protection
    391.   volumeMounts: []
    393.   volumes: []
    395.   nodeSelector: {}
    397.   tolerations: []
    399.   affinity: {}
    401. xrdp:
    402.   labels:
    403.     app.jumpserver.org/name: jms-xrdp
    405.   config:
    406.     log:
    407.       level: ERROR
    409.   replicaCount: 1
    411.   image:
    412.     registry: registry.fit2cloud.com
    413.     repository: jumpserver/xrdp
    414.     tag: v2.13.2
    415.     pullPolicy: IfNotPresent
    417.   command: []
    419.   env: []
    421.   livenessProbe:
    422.     failureThreshold: 30
    423.     tcpSocket:
    424.       port: rdp
    426.   readinessProbe:
    427.     failureThreshold: 30
    428.     tcpSocket:
    429.       port: rdp
    431.   podSecurityContext: {}
    432.     # fsGroup: 2000
    434.   securityContext: {}
    435.     # capabilities:
    436.     #   drop:
    437.     #   - ALL
    438.     # readOnlyRootFilesystem: true
    439.     # runAsNonRoot: true
    440.     # runAsUser: 1000
    442.   service:
    443.     type: ClusterIP
    444.     rdp:
    445.       port: 3389
    447.   resources: {}
    448.     # We usually recommend not to specify default resources and to leave this as a conscious
    449.     # choice for the user. This also increases chances charts run on environments with little
    450.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    451.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    452.     # limits:
    453.     #   cpu: 100m
    454.     #   memory: 128Mi
    455.     # requests:
    456.     #   cpu: 100m
    457.     #   memory: 128Mi
    459.   persistence:
    460.     storageClassName: jumpserver-data
    461.     accessModes:
    462.       - ReadWriteMany
    463.     size: 10Gi
    464.     # annotations: {}
    465.     finalizers:
    466.       - kubernetes.io/pvc-protection
    468.   volumeMounts: []
    470.   volumes: []
    472.   nodeSelector: {}
    474.   tolerations: []
    476.   affinity: {}
    478. web:
    479.   enabled: true
    481.   labels:
    482.     app.jumpserver.org/name: jms-web
    484.   replicaCount: 1
    486.   image:
    487.     registry: docker.io
    488.     repository: jumpserver/web
    489.     tag: v2.13.2
    490.     pullPolicy: IfNotPresent
    492.   command: []
    494.   env: []
    496.   livenessProbe:
    497.     failureThreshold: 30
    498.     httpGet:
    499.       path: /api/health/
    500.       port: web
    502.   readinessProbe:
    503.     failureThreshold: 30
    504.     httpGet:
    505.       path: /api/health/
    506.       port: web
    508.   podSecurityContext: {}
    509.     # fsGroup: 2000
    511.   securityContext: {}
    512.     # capabilities:
    513.     #   drop:
    514.     #   - ALL
    515.     # readOnlyRootFilesystem: true
    516.     # runAsNonRoot: true
    517.     # runAsUser: 1000
    519.   service:
    520.     type: ClusterIP
    521.     web:
    522.       port: 80
    524.   resources: {}
    525.     # We usually recommend not to specify default resources and to leave this as a conscious
    526.     # choice for the user. This also increases chances charts run on environments with little
    527.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    528.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    529.     # limits:
    530.     #   cpu: 100m
    531.     #   memory: 128Mi
    532.     # requests:
    533.     #   cpu: 100m
    534.     #   memory: 128Mi
    536.   persistence:
    537.     storageClassName: jumpserver-data
    538.     accessModes:
    539.       - ReadWriteMany
    540.     size: 1Gi
    541.     # annotations: {}
    542.     finalizers:
    543.       - kubernetes.io/pvc-protection
    545.   volumeMounts: []
    547.   volumes: []
    549.   nodeSelector: {}
    551.   tolerations: []
    553.   affinity: {}
    1. # 安装
    2. helm install jumpserver ./ -n default
    4. # 卸载
    5. helm uninstall jumpserver -n default
    7. # 查看

    源码部署

    后续的使用请参考 快速入门