安装文档

    外置环境要求

    • 推荐使用外置 数据库 和 Redis，方便日后扩展升级

    可以使用由 华为云 提供的容器镜像服务

    一键部署

    1. cd /opt/jumpserver-installer-v2.23.2
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h
    1. cd /opt
    2. wget https://github.com/jumpserver/installer/releases/download/v2.23.2/jumpserver-installer-v2.23.2.tar.gz
    3. tar -xf jumpserver-installer-v2.23.2.tar.gz
    4. cd jumpserver-installer-v2.23.2
    1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
    2. cat config-example.txt
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    7. VOLUME_DIR=/opt/jumpserver
    8. DOCKER_DIR=/var/lib/docker
    9. SECRET_KEY=
    10. BOOTSTRAP_TOKEN=
    11. LOG_LEVEL=ERROR
    13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
    14. USE_EXTERNAL_MYSQL=0
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
    22. USE_EXTERNAL_REDIS=0
    23. REDIS_HOST=redis
    24. REDIS_PORT=6379
    25. REDIS_PASSWORD=
    27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
    28. COMPOSE_PROJECT_NAME=jms
    29. COMPOSE_HTTP_TIMEOUT=3600
    30. DOCKER_CLIENT_TIMEOUT=3600
    31. DOCKER_SUBNET=192.168.250.0/24
    33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    34. USE_IPV6=0
    35. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
    37. ## 访问配置
    38. HTTP_PORT=80
    39. SSH_PORT=2222
    40. MAGNUS_MYSQL_PORT=33060
    41. MAGNUS_MARIADB_PORT=33061
    43. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
    44. # USE_LB=1
    45. # HTTPS_PORT=443
    46. # SERVER_NAME=your_domain_name
    47. # SSL_CERTIFICATE=your_cert
    48. # SSL_CERTIFICATE_KEY=your_cert_key
    50. ## Nginx 文件上传大小
    51. CLIENT_MAX_BODY_SIZE=4096m
    53. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    54. USE_TASK=1
    56. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
    57. USE_XPACK=0
    58. RDP_PORT=3389
    59. MAGNUS_POSTGRE_PORT=54320
    60. TCP_SEND_BUFFER_BYTES=4194304
    61. TCP_RECV_BUFFER_BYTES=6291456
    63. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
    64. # SESSION_COOKIE_AGE=86400
    65. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
    67. # Koko Lion XRDP 组件配置
    68. CORE_HOST=http://core:8080
    69. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
    71. ## 终端使用宿主 HOSTNAME 标识
    72. SERVER_HOSTNAME=${HOSTNAME}
    74. # 额外的配置
    75. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt

    离线部署(amd64)

    从飞致云社区 , 并上传到部署服务器的 /opt 目录

    1. cd /opt
    2. tar -xf jumpserver-offline-installer-v2.23.2-amd64-26.tar.gz
    3. cd jumpserver-offline-installer-v2.23.2-amd64-26
    1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
    2. cat config-example.txt
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    7. VOLUME_DIR=/opt/jumpserver
    8. DOCKER_DIR=/var/lib/docker
    9. SECRET_KEY=
    10. BOOTSTRAP_TOKEN=
    11. LOG_LEVEL=ERROR
    13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
    14. USE_EXTERNAL_MYSQL=0
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
    22. USE_EXTERNAL_REDIS=0
    23. REDIS_HOST=redis
    24. REDIS_PORT=6379
    25. REDIS_PASSWORD=
    27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
    28. COMPOSE_PROJECT_NAME=jms
    29. COMPOSE_HTTP_TIMEOUT=3600
    30. DOCKER_CLIENT_TIMEOUT=3600
    31. DOCKER_SUBNET=192.168.250.0/24
    33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    34. USE_IPV6=0
    35. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
    37. ## 访问配置
    38. HTTP_PORT=80
    39. SSH_PORT=2222
    40. MAGNUS_MYSQL_PORT=33060
    41. MAGNUS_MARIADB_PORT=33061
    43. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
    44. # USE_LB=1
    45. # HTTPS_PORT=443
    46. # SERVER_NAME=your_domain_name
    47. # SSL_CERTIFICATE=your_cert
    48. # SSL_CERTIFICATE_KEY=your_cert_key
    50. ## Nginx 文件上传大小
    51. CLIENT_MAX_BODY_SIZE=4096m
    53. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    54. USE_TASK=1
    56. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
    57. USE_XPACK=0
    58. RDP_PORT=3389
    59. MAGNUS_POSTGRE_PORT=54320
    60. TCP_SEND_BUFFER_BYTES=4194304
    61. TCP_RECV_BUFFER_BYTES=6291456
    63. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
    64. # SESSION_COOKIE_AGE=86400
    65. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
    67. # Koko Lion XRDP 组件配置
    68. CORE_HOST=http://core:8080
    69. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
    71. ## 终端使用宿主 HOSTNAME 标识
    72. SERVER_HOSTNAME=${HOSTNAME}
    74. # 额外的配置
    75. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd /opt/jumpserver-installer-v2.23.2
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h

    离线部署(arm64)

    1. cd /opt
    2. tar -xf jumpserver-offline-installer-v2.23.2-arm64-26.tar.gz
    3. cd jumpserver-offline-installer-v2.23.2-arm64-26
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## 安装配置, amd64 默认使用华为云加速下载, arm64 请注释掉 DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    6. # DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
    7. VOLUME_DIR=/opt/jumpserver
    8. DOCKER_DIR=/var/lib/docker
    9. SECRET_KEY=
    10. BOOTSTRAP_TOKEN=
    11. LOG_LEVEL=ERROR
    13. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
    14. USE_EXTERNAL_MYSQL=0
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
    22. USE_EXTERNAL_REDIS=0
    23. REDIS_HOST=redis
    24. REDIS_PORT=6379
    25. REDIS_PASSWORD=
    27. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
    28. COMPOSE_PROJECT_NAME=jms
    29. COMPOSE_HTTP_TIMEOUT=3600
    30. DOCKER_CLIENT_TIMEOUT=3600
    31. DOCKER_SUBNET=192.168.250.0/24
    33. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    34. USE_IPV6=0
    35. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
    37. ## 访问配置
    38. HTTP_PORT=80
    39. SSH_PORT=2222
    40. MAGNUS_MYSQL_PORT=33060
    41. MAGNUS_MARIADB_PORT=33061
    43. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
    44. # USE_LB=1
    45. # HTTPS_PORT=443
    46. # SERVER_NAME=your_domain_name
    47. # SSL_CERTIFICATE=your_cert
    48. # SSL_CERTIFICATE_KEY=your_cert_key
    50. ## Nginx 文件上传大小
    51. CLIENT_MAX_BODY_SIZE=4096m
    53. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    54. USE_TASK=1
    56. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
    57. USE_XPACK=0
    58. RDP_PORT=3389
    59. MAGNUS_POSTGRE_PORT=54320
    60. TCP_SEND_BUFFER_BYTES=4194304
    61. TCP_RECV_BUFFER_BYTES=6291456
    63. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
    64. # SESSION_COOKIE_AGE=86400
    65. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
    67. # Koko Lion XRDP 组件配置
    68. CORE_HOST=http://core:8080
    69. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
    71. ## 终端使用宿主 HOSTNAME 标识
    72. SERVER_HOSTNAME=${HOSTNAME}
    74. # 额外的配置
    75. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd /opt/jumpserver-installer-v2.23.2
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h

    Kubernetes

    1. helm repo add jumpserver https://jumpserver.github.io/helm-charts
    2. helm repo list
    3. vi values.yaml
    1. # 模板 https://github.com/jumpserver/helm-charts/blob/main/charts/jumpserver/values.yaml
    2. # Default values for jumpserver.
    3. # This is a YAML-formatted file.
    4. # Declare variables to be passed into your templates.
    6. nameOverride: ""
    7. fullnameOverride: ""
    9. ## @param global.imageRegistry Global Docker image registry
    10. ## @param global.imagePullSecrets Global Docker registry secret names as an array
    11. ## @param global.storageClass Global StorageClass for Persistent Volume(s)
    12. ## @param global.redis.password Global Redis™ password (overrides `auth.password`)
    13. ##
    14. global:
    15.   imageRegistry: "docker.io"    # 国内可以使用华为云加速 swr.cn-south-1.myhuaweicloud.com
    16.   imageTag: v2.23.2             # 版本号
    17.   ## E.g.
    18.   #  imagePullSecrets:
    19.   #    - name: harborsecret
    20.   #
    21.   #  storageClass: "jumpserver-data"
    22.   ##
    23.     # - name: yourSecretKey
    24.   storageClass: ""              # (*必填) NFS SC
    26. ## Please configure your MySQL server first
    27. ## Jumpserver will not start the external MySQL server.
    28. ##
    29. externalDatabase:               #  (*必填) 数据库相关设置
    30.   engine: mysql
    31.   host: localhost
    32.   port: 3306
    33.   user: root
    34.   password: ""
    35.   database: jumpserver
    37. ## Please configure your Redis server first
    38. ## Jumpserver will not start the external Redis server.
    39. ##
    40. externalRedis:                  #  (*必填) Redis 设置
    41.   host: localhost
    42.   port: 6379
    43.   password: ""
    45. serviceAccount:
    46.   # Specifies whether a service account should be created
    47.   create: false
    48.   # The name of the service account to use.
    49.   # If not set and create is true, a name is generated using the fullname template
    50.   name:
    52. ingress:
    53.   enabled: true                             # 不使用 ingress 可以关闭
    54.   annotations:
    55.     # kubernetes.io/tls-acme: "true"
    56.     compute-full-forwarded-for: "true"
    57.     use-forwarded-headers: "true"
    58.     kubernetes.io/ingress.class: nginx
    59.     nginx.ingress.kubernetes.io/configuration-snippet: |
    60.        proxy_set_header Upgrade "websocket";
    61.        proxy_set_header Connection "Upgrade";
    62.   hosts:
    63.     - "test.jumpserver.org"                 # 对外域名
    64.   tls: []
    65.   #  - secretName: chart-example-tls
    66.   #    hosts:
    67.   #      - chart-example.local
    69. core:
    70.   enabled: true
    72.   labels:
    73.     app.jumpserver.org/name: jms-core
    75.   config:
    76.     # Generate a new random secret key by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
    77.     # secretKey: "B3f2w8P2PfxIAS7s4URrD9YmSbtqX4vXdPUL217kL9XPUOWrmy"
    78.     secretKey: ""                            #  (*必填) 加密敏感信息的 secret_key, 长度推荐大于 50 位
    79.     # Generate a new random bootstrap token by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
    80.     # bootstrapToken: "7Q11Vz6R2J6BLAdO"
    81.     bootstrapToken: ""                       #  (*必填) 组件认证使用的 token, 长度推荐大于 24 位
    82.     # Enabled it for debug
    83.     debug: false
    84.     log:
    85.       level: ERROR
    87.   replicaCount: 1
    89.   image:
    90.     registry: docker.io
    91.     repository: jumpserver/core
    92.     tag: v2.23.2
    93.     pullPolicy: IfNotPresent
    95.   command: []
    97.   env:
    98.     # See: https://docs.jumpserver.org/zh/master/admin-guide/env/#core
    99.     SESSION_EXPIRE_AT_BROWSER_CLOSE: true
    100.     # SESSION_COOKIE_AGE: 86400
    101.     # SECURITY_VIEW_AUTH_NEED_MFA: true
    103.   livenessProbe:
    104.     failureThreshold: 30
    105.     httpGet:
    106.       path: /api/health/
    107.       port: web
    109.   readinessProbe:
    110.     failureThreshold: 30
    111.     httpGet:
    112.       path: /api/health/
    113.       port: web
    115.   podSecurityContext: {}
    116.     # fsGroup: 2000
    118.   securityContext: {}
    119.     # capabilities:
    120.     #   drop:
    121.     #   - ALL
    122.     # readOnlyRootFilesystem: true
    123.     # runAsNonRoot: true
    124.     # runAsUser: 1000
    126.   service:
    127.     type: ClusterIP
    128.     web:
    129.       port: 8080
    130.     ws:
    131.       port: 8070
    133.   resources: {}
    134.     # We usually recommend not to specify default resources and to leave this as a conscious
    135.     # choice for the user. This also increases chances charts run on environments with little
    136.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    137.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    138.     # limits:
    139.     #   cpu: 1000m
    140.     #   memory: 2048Mi
    141.     # requests:
    142.     #   cpu: 500m
    143.     #   memory: 1024Mi
    145.   persistence:
    146.     storageClassName: jumpserver-data
    147.     accessModes:
    148.       - ReadWriteMany
    149.     size: 100Gi
    150.     # annotations: {}
    151.     finalizers:
    152.       - kubernetes.io/pvc-protection
    153.     # subPath: ""
    154.     # existingClaim:
    156.   volumeMounts: []
    158.   volumes: []
    160.   nodeSelector: {}
    162.   tolerations: []
    164.   affinity: {}
    166. koko:
    167.   enabled: true
    169.   labels:
    170.     app.jumpserver.org/name: jms-koko
    172.   config:
    173.     log:
    174.       level: ERROR
    176.   replicaCount: 1
    178.   image:
    179.     registry: docker.io
    180.     repository: jumpserver/koko
    181.     tag: v2.23.2
    182.     pullPolicy: IfNotPresent
    184.   command: []
    186.   env: []
    187.     # See: https://docs.jumpserver.org/zh/master/admin-guide/env/#koko
    188.     # LANGUAGE_CODE: zh
    189.     # REUSE_CONNECTION: true
    190.     # ENABLE_LOCAL_PORT_FORWARD: true
    191.     # ENABLE_VSCODE_SUPPORT: true
    193.   livenessProbe:
    194.     failureThreshold: 30
    195.     httpGet:
    196.       path: /koko/health/
    197.       port: web
    199.   readinessProbe:
    200.     failureThreshold: 30
    201.     httpGet:
    202.       path: /koko/health/
    203.       port: web
    205.   podSecurityContext: {}
    206.     # fsGroup: 2000
    208.   securityContext:
    209.     privileged: true
    210.     # capabilities:
    211.     #   drop:
    212.     #   - ALL
    213.     # readOnlyRootFilesystem: true
    214.     # runAsNonRoot: true
    215.     # runAsUser: 1000
    217.   service:
    218.     type: ClusterIP
    219.     web:
    220.       port: 5000
    221.     ssh:
    222.       port: 2222
    224.   resources: {}
    225.     # We usually recommend not to specify default resources and to leave this as a conscious
    226.     # choice for the user. This also increases chances charts run on environments with little
    227.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    228.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    229.     # limits:
    230.     #   cpu: 100m
    231.     #   memory: 128Mi
    232.     # requests:
    233.     #   cpu: 100m
    234.     #   memory: 128Mi
    236.   persistence:
    237.     storageClassName: jumpserver-data
    238.     accessModes:
    239.       - ReadWriteMany
    240.     size: 10Gi
    241.     # annotations: {}
    242.     finalizers:
    243.       - kubernetes.io/pvc-protection
    245.   volumeMounts: []
    247.   volumes: []
    249.   nodeSelector: {}
    251.   tolerations: []
    253.   affinity: {}
    255. lion:
    256.   enabled: true
    258.   labels:
    259.     app.jumpserver.org/name: jms-lion
    261.   config:
    262.     log:
    263.       level: ERROR
    265.   replicaCount: 1
    267.   image:
    268.     registry: docker.io
    269.     repository: jumpserver/lion
    270.     tag: v2.23.2
    271.     pullPolicy: IfNotPresent
    273.   command: []
    275.   env:
    276.     # See: https://docs.jumpserver.org/zh/master/admin-guide/env/#lion
    277.     JUMPSERVER_ENABLE_FONT_SMOOTHING: true
    278.     # JUMPSERVER_COLOR_DEPTH: 32
    279.     # JUMPSERVER_ENABLE_WALLPAPER: true
    280.     # JUMPSERVER_ENABLE_THEMING: true
    281.     # JUMPSERVER_ENABLE_FULL_WINDOW_DRAG: true
    282.     # JUMPSERVER_ENABLE_DESKTOP_COMPOSITION: true
    283.     # JUMPSERVER_ENABLE_MENU_ANIMATIONS: true
    285.   livenessProbe:
    286.     failureThreshold: 30
    287.     httpGet:
    288.       path: /lion/health/
    289.       port: web
    291.   readinessProbe:
    292.     failureThreshold: 30
    293.     httpGet:
    294.       path: /lion/health/
    295.       port: web
    297.   podSecurityContext: {}
    298.     # fsGroup: 2000
    300.   securityContext: {}
    301.     # capabilities:
    302.     #   drop:
    303.     #   - ALL
    304.     # readOnlyRootFilesystem: true
    305.     # runAsNonRoot: true
    306.     # runAsUser: 1000
    308.   service:
    309.     type: ClusterIP
    310.     web:
    311.       port: 8081
    313.   resources: {}
    314.     # We usually recommend not to specify default resources and to leave this as a conscious
    315.     # choice for the user. This also increases chances charts run on environments with little
    316.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    317.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    318.     # limits:
    319.     #   cpu: 100m
    320.     #   memory: 512Mi
    321.     # requests:
    322.     #   cpu: 100m
    323.     #   memory: 512Mi
    325.   persistence:
    326.     storageClassName: jumpserver-data
    327.     accessModes:
    328.       - ReadWriteMany
    329.     size: 50Gi
    330.     # annotations: {}
    331.     finalizers:
    332.       - kubernetes.io/pvc-protection
    334.   volumeMounts: []
    336.   volumes: []
    338.   nodeSelector: {}
    340.   tolerations: []
    342.   affinity: {}
    344. magnus:
    345.   enabled: true
    347.   labels:
    348.     app.jumpserver.org/name: jms-magnus
    350.     log:
    351.       level: ERROR
    353.   replicaCount: 1
    355.   image:
    356.     registry: docker.io
    357.     repository: jumpserver/magnus
    358.     tag: v2.21.0
    359.     pullPolicy: IfNotPresent
    361.   command: []
    363.   env: []
    365.   livenessProbe:
    366.     failureThreshold: 30
    367.     tcpSocket:
    368.       port: mysql
    370.   readinessProbe:
    371.     failureThreshold: 30
    372.     tcpSocket:
    373.       port: mysql
    375.   podSecurityContext: {}
    376.     # fsGroup: 2000
    378.   securityContext: {}
    379.     # capabilities:
    380.     #   drop:
    381.     #   - ALL
    382.     # readOnlyRootFilesystem: true
    383.     # runAsNonRoot: true
    384.     # runAsUser: 1000
    386.   service:
    387.     type: ClusterIP
    388.     mysql:
    389.       port: 33060
    390.     mariadb:
    391.       port: 33061
    392.     postgre:
    393.       port: 54320
    395.   resources: {}
    396.     # We usually recommend not to specify default resources and to leave this as a conscious
    397.     # choice for the user. This also increases chances charts run on environments with little
    398.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    399.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    400.     # limits:
    401.     #   cpu: 100m
    402.     #   memory: 512Mi
    403.     # requests:
    404.     #   cpu: 100m
    405.     #   memory: 512Mi
    407.   persistence:
    408.     storageClassName: jumpserver-data
    409.     accessModes:
    410.       - ReadWriteMany
    411.     size: 10Gi
    412.     # annotations: {}
    413.     finalizers:
    414.       - kubernetes.io/pvc-protection
    416.   volumeMounts: []
    418.   volumes: []
    420.   nodeSelector: {}
    422.   tolerations: []
    424.   affinity: {}
    426. xpack:
    427.   enabled: false      # 企业版本打开此选项
    429. omnidb:
    430.   labels:
    431.     app.jumpserver.org/name: jms-omnidb
    433.   config:
    434.     log:
    435.       level: ERROR
    437.   replicaCount: 1
    439.   image:
    440.     registry: registry.fit2cloud.com
    441.     repository: jumpserver/omnidb
    442.     tag: v2.23.2
    443.     pullPolicy: IfNotPresent
    445.   command: []
    447.   env: []
    449.   livenessProbe:
    450.     failureThreshold: 30
    451.     tcpSocket:
    452.       port: web
    454.   readinessProbe:
    455.     failureThreshold: 30
    456.     tcpSocket:
    457.       port: web
    459.   podSecurityContext: {}
    460.     # fsGroup: 2000
    462.   securityContext: {}
    463.     # capabilities:
    464.     #   drop:
    465.     #   - ALL
    466.     # readOnlyRootFilesystem: true
    467.     # runAsNonRoot: true
    468.     # runAsUser: 1000
    470.   service:
    471.     type: ClusterIP
    472.     web:
    473.       port: 8082
    475.   resources: {}
    476.     # We usually recommend not to specify default resources and to leave this as a conscious
    477.     # choice for the user. This also increases chances charts run on environments with little
    478.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    479.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    480.     # limits:
    481.     #   cpu: 100m
    482.     #   memory: 128Mi
    483.     # requests:
    484.     #   cpu: 100m
    485.     #   memory: 128Mi
    487.   persistence:
    488.     storageClassName: jumpserver-data
    489.     accessModes:
    490.       - ReadWriteMany
    491.     size: 10Gi
    492.     # annotations: {}
    493.     finalizers:
    494.       - kubernetes.io/pvc-protection
    496.   volumeMounts: []
    498.   volumes: []
    500.   nodeSelector: {}
    502.   tolerations: []
    504.   affinity: {}
    506. xrdp:
    507.   labels:
    508.     app.jumpserver.org/name: jms-xrdp
    510.   config:
    511.     log:
    512.       level: ERROR
    514.   replicaCount: 1
    516.   image:
    517.     registry: registry.fit2cloud.com
    518.     repository: jumpserver/xrdp
    519.     tag: v2.23.2
    520.     pullPolicy: IfNotPresent
    522.   command: []
    524.   env:
    525.     # tcp_send_buffer_bytes and tcp_recv_buffer_bytes See: https://github.com/neutrinolabs/xrdp/issues/1483
    526.     TCP_SEND_BUFFER_BYTES: 4194304
    527.     TCP_RECV_BUFFER_BYTES: 6291456
    528.     JUMPSERVER_ENABLE_FONT_SMOOTHING: true
    529.     # JUMPSERVER_ENABLE_WALLPAPER: true
    530.     # JUMPSERVER_ENABLE_THEMING: true
    531.     # JUMPSERVER_ENABLE_FULL_WINDOW_DRAG: true
    532.     # JUMPSERVER_ENABLE_DESKTOP_COMPOSITION: true
    533.     # JUMPSERVER_ENABLE_MENU_ANIMATIONS: true
    535.   livenessProbe:
    536.     failureThreshold: 30
    537.     tcpSocket:
    538.       port: rdp
    540.   readinessProbe:
    541.     failureThreshold: 30
    542.     tcpSocket:
    543.       port: rdp
    545.   podSecurityContext: {}
    546.     # fsGroup: 2000
    548.   securityContext: {}
    549.     # capabilities:
    550.     #   drop:
    551.     #   - ALL
    552.     # readOnlyRootFilesystem: true
    553.     # runAsNonRoot: true
    554.     # runAsUser: 1000
    556.   service:
    557.     type: ClusterIP
    558.     rdp:
    559.       port: 3389
    561.   resources: {}
    562.     # We usually recommend not to specify default resources and to leave this as a conscious
    563.     # choice for the user. This also increases chances charts run on environments with little
    564.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    565.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    566.     # limits:
    567.     #   cpu: 100m
    568.     #   memory: 128Mi
    569.     # requests:
    570.     #   cpu: 100m
    571.     #   memory: 128Mi
    573.   persistence:
    574.     storageClassName: jumpserver-data
    575.     accessModes:
    576.       - ReadWriteMany
    577.     size: 50Gi
    578.     # annotations: {}
    579.     finalizers:
    580.       - kubernetes.io/pvc-protection
    582.   volumeMounts: []
    584.   volumes: []
    586.   nodeSelector: {}
    588.   tolerations: []
    590.   affinity: {}
    592. web:
    593.   enabled: true
    595.   labels:
    596.     app.jumpserver.org/name: jms-web
    598.   replicaCount: 1
    600.   image:
    601.     registry: docker.io
    602.     repository: jumpserver/web
    603.     tag: v2.23.2
    604.     pullPolicy: IfNotPresent
    606.   command: []
    608.   env: []
    609.     # nginx client_max_body_size, default 4G
    610.     # CLIENT_MAX_BODY_SIZE: 4096m
    612.   livenessProbe:
    613.     failureThreshold: 30
    614.     httpGet:
    615.       path: /api/health/
    616.       port: web
    618.   readinessProbe:
    619.     failureThreshold: 30
    620.     httpGet:
    621.       path: /api/health/
    622.       port: web
    624.   podSecurityContext: {}
    625.     # fsGroup: 2000
    627.   securityContext: {}
    628.     # capabilities:
    629.     #   drop:
    630.     #   - ALL
    631.     # readOnlyRootFilesystem: true
    632.     # runAsNonRoot: true
    633.     # runAsUser: 1000
    635.   service:
    636.     type: ClusterIP
    637.     web:
    638.       port: 80
    640.   resources: {}
    641.     # We usually recommend not to specify default resources and to leave this as a conscious
    642.     # choice for the user. This also increases chances charts run on environments with little
    643.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    644.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    645.     # limits:
    646.     #   cpu: 100m
    647.     #   memory: 128Mi
    648.     # requests:
    649.     #   cpu: 100m
    650.     #   memory: 128Mi
    652.   persistence:
    653.     storageClassName: jumpserver-data
    654.     accessModes:
    655.       - ReadWriteMany
    656.     size: 1Gi
    657.     # annotations: {}
    658.     finalizers:
    659.       - kubernetes.io/pvc-protection
    661.   volumeMounts: []
    663.   volumes: []
    665.   nodeSelector: {}
    667.   tolerations: []
    669.   affinity: {}
    1. # 安装
    2. helm install jms-k8s jumpserver/jumpserver -n default -f values.yaml
    4. # 卸载

    源码部署