Helm JAS Installation

Install JFrog Advanced Security (JAS) in service mode with the JFrog Xray Helm chart. In service mode, JAS runs as two dedicated deployments, jascontextual and jasexposures, instead of Xray dispatching a Kubernetes Job for each JAS scan.

Before you begin, review the prerequisites and install Xray with Helm. For more information, see Xray Single Node Helm Installation.

Prerequisites

• Xray version 3.156.x or later.
• Xray must run as separate deployments. JAS service mode requires splitXraytoSeparateDeployments.fullSplit: true.

Install JAS in Service Mode with Helm

1. Add the following settings to your values.yaml file.

   YAML

   splitXraytoSeparateDeployments:
     fullSplit: true
   jas:
     separate:
       service:
         enabled: true

   Setting jas.separate.service.enabled: true does the following:

   • Sets jas.separate.service.enabled: true in the Xray system.yaml.
   • Deploys both the jascontextual and jasexposures services.

2. Install or upgrade Xray with your values.yaml file.

   Bash

   helm upgrade --install xray jfrog/xray --namespace <namespace> -f values.yaml

3. Verify that the JAS pods are running.

   Bash

   kubectl get pods --namespace <namespace> | grep jas

   The output lists the <release name>-xray-jascontextual and <release name>-xray-jasexposures pods.

Do not use jascontextual.enabled or jasexposures.enabled to enable service mode. These flags only deploy the services and do not switch Xray to service mode.

Optional Configurations

Related Topics

• JAS Service Mode Installation
• Standalone JAS Installation ( Separate VM )
• Bundled JAS Installation ( Not Production-Ready )
• Xray Single Node Helm Installation
• Advanced Security Readiness Checking