---
title: Charmhub | Deploy Charmed Kubernetes using Charmhub - The Open Operator Collection
description: Deploy the latest version of Charmed Kubernetes on any cloud.
url: https://charmhub.io/charmed-kubernetes/configurations/containerd
---

##### We've discontinued the registration of new Bundles

New Bundle registrations are no longer accepted. Existing bundles remain functional. We recommend using the Juju Terraform Provider for new deployments.

[Learn more](https://discourse.charmhub.io/t/discontinuing-new-charmhub-bundle-registrations/15344)

# Charmed Kubernetes

[Canonical Kubernetes](https://charmhub.io/publisher/containers "View all packages from Canonical Kubernetes")
| bundle

* [Canonical Kubernetes](https://charmhub.io/publisher/containers "View all packages from Canonical Kubernetes")
  | bundle
* [Cloud](https://charmhub.io/?filter=cloud)

Platform:

stable 1311

```
juju deploy charmed-kubernetes
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [Calico](https://charmhub.io/charmed-kubernetes/configurations/calico)
* [Containerd](https://charmhub.io/charmed-kubernetes/configurations/containerd)
* [Easyrsa](https://charmhub.io/charmed-kubernetes/configurations/easyrsa)
* [Etcd](https://charmhub.io/charmed-kubernetes/configurations/etcd)
* [Kubeapi Load Balancer](https://charmhub.io/charmed-kubernetes/configurations/kubeapi-load-balancer)
* [Kubernetes Control Plane](https://charmhub.io/charmed-kubernetes/configurations/kubernetes-control-plane)
* [Kubernetes Worker](https://charmhub.io/charmed-kubernetes/configurations/kubernetes-worker)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* config\_version | string

  Default: v2

  Containerd config version. Can be "v1" or "v2".
  DEPRECATED: config\_version will be removed in a future release.
* custom-registry-ca | string

  Base64 encoded Certificate Authority (CA) bundle. Setting this config
  allows container runtimes to pull images from registries with TLS
  certificates signed by an external CA.
* custom\_registries | string

  Default: []

  Registry endpoints and credentials. Setting this config allows Kubelet
  to pull images from registries where auth is required.
  The value for this config must be a JSON array of credential objects, like this:
  e.g.: [{"host": "my.registry:port", "username": "user", "password": "pass"}]
  Credential Object Parameters:
  `url: REQUIRED str`
  the URL to the registry, include the port if not it isn't implied from the schema.
  e.g: "url": "https://my.registry:8443"
  e.g: "url": "http://my.registry"
  host: OPTIONAL str - defaults to auto-generated from the url
  could be registry host address or a name
  e.g.: myregistry.io:9000, 10.10.10.10:5432
  e.g.: myregistry.io, myregistry
  Note: It will be derived from `url` if not provided.
  e.g.: "url": "http://10.10.10.10:8000" --> "host": "10.10.10.10:8000"
  username: OPTIONAL str - default ''
  password: OPTIONAL str|dict - default ''
  Used by containerd for basic authentication to the registry.
  If a string, will be rendered wrapped as a double-quoted str (password = "my-strong-password")
  If a dictionary, will be rendered as a single-quoted json (password = '{"my": "json"}')
  e.g.: "password": '"$(jq -c . gce.json)"'
  ca\_file: OPTIONAL str - default ''
  cert\_file: OPTIONAL str - default ''
  key\_file: OPTIONAL str - default ''
  For ssl/tls communication these should be a base64 encoded file
  e.g.: "ca\_file": "'"$(base64 -w 0 < my.custom.registry.pem)"'"
  insecure\_skip\_verify: OPTIONAL bool - default false
  For situatations where the registry has self-signed or expired certs and a quick work-around is necessary.
  e.g.: "insecure\_skip\_verify": true
  example config)
  juju config containerd custom\_registries='[{
  "url": "https://registry.example.com",
  "ca\_file": "'"$(base64 -w 0 < ~/my.custom.ca.pem)"'",
  "cert\_file": "'"$(base64 -w 0 < ~/my.custom.cert.pem)"'",
  "key\_file": "'"$(base64 -w 0 < ~/my.custom.key.pem)"'",
  }]'
* disable-juju-proxy | boolean

  Ignore juju-http(s) proxy settings on this charm.
  If set to true, all juju https proxy settings will be ignored
* enable-cgroups | boolean

  Enable GRUB cgroup overrides cgroup\_enable=memory swapaccount=1. WARNING
  changing this option will reboot the host - use with caution on production
  services.
* gpu\_driver | string

  Default: auto

  Override GPU driver installation. Options are "auto", "nvidia", "none".
  Caution: setting this to nvidia will cause nvidia drivers to be installed on kubernetes-control-plane, even if a GPU is not present.
* http\_proxy | string

  URL to use for HTTP\_PROXY to be used by Containerd. Useful in
  egress-filtered environments where a proxy is the only option for
  accessing the registry to pull images.
* https\_proxy | string

  URL to use for HTTPS\_PROXY to be used by Containerd. Useful in
  egress-filtered environments where a proxy is the only option for
  accessing the registry to pull images.
* kill\_signal | string

  Default: SIGTERM

  Set containerd systemd KillSignal. Options are standard signals from
  https://man7.org/linux/man-pages/man7/signal.7.html
* no\_proxy | string

  Comma-separated list of destinations (either domain names or IP
  addresses) which should be accessed directly, rather than through
  the proxy defined in http\_proxy or https\_proxy. Must be less than
  2023 characters long.
* nvidia\_apt\_key\_urls | string

  Default: https://nvidia.github.io/nvidia-container-runtime/gpgkey
  https://developer.download.nvidia.com/compute/cuda/repos/{id}{version\_id\_no\_dot}/x86\_64/3bf863cc.pub

  Space-separated list of APT GPG key URLs to add when using Nvidia GPUs.
  Supported template options:
  {id}: OS release ID, e.g. "ubuntu"
  {version\_id}: OS release version ID, e.g. "20.04"
  {version\_id\_no\_dot}: OS release version ID with no dot, e.g. "2004"
* nvidia\_apt\_packages | string

  Default: cuda-drivers nvidia-container-runtime

  Space-separated list of APT packages to install when using Nvidia GPUs.
* nvidia\_apt\_sources | string

  Default: deb https://nvidia.github.io/libnvidia-container/stable/deb/$(ARCH) /
  deb https://nvidia.github.io/nvidia-container-runtime/{id}{version\_id}/$(ARCH) /
  deb https://developer.download.nvidia.com/compute/cuda/repos/{id}{version\_id\_no\_dot}/x86\_64 /

  Newline-separated list of APT sources to add when using Nvidia GPUs.
  Supported template options:
  {id}: OS release ID, e.g. "ubuntu"
  {version\_id}: OS release version ID, e.g. "20.04"
  {version\_id\_no\_dot}: OS release version ID with no dot, e.g. "2004"
* runtime | string

  Default: auto

  Set a custom containerd runtime. Set "auto" to select based on hardware.
* shim | string

  Default: containerd-shim

  Set a custom containerd shim.