---
title: Charmhub | Deploy Dex using Charmhub - The Open Operator Collection
description: Deploy the latest version of Dex as a Kubernetes Operator on any cloud.
url: https://charmhub.io/dex-auth/configurations
---

# Dex

[Kubeflow Charmers](https://charmhub.io/publisher/ckfbot "View all packages from Kubeflow Charmers")

* [Kubeflow Charmers](https://charmhub.io/publisher/ckfbot "View all packages from Kubeflow Charmers")
* [Containers](https://charmhub.io/?filter=containers)
* [Security](https://charmhub.io/?filter=security)

Platform:

2.41/stable 815

```
juju deploy dex-auth --channel 2.41/stable
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [connectors](https://charmhub.io/dex-auth/configurations#connectors)
* [enable-password-db](https://charmhub.io/dex-auth/configurations#enable-password-db)
* [issuer-url](https://charmhub.io/dex-auth/configurations#issuer-url)
* [port](https://charmhub.io/dex-auth/configurations#port)
* [public-url](https://charmhub.io/dex-auth/configurations#public-url)
* [static-password](https://charmhub.io/dex-auth/configurations#static-password)
* [static-username](https://charmhub.io/dex-auth/configurations#static-username)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* connectors | string

  List of connectors in YAML format, as shown
  in https://github.com/dexidp/dex#connectors
* enable-password-db | boolean

  Default: True

  Allows dex to keep a list of passwords which can be used to login to dex
* issuer-url | string

  Format http(s)://<publicly-accessible-dns-name>/dex
  (Also referred to as issuer or OIDC provider ) This is the canonical URL that OIDC clients
  MUST use to refer to dex. If not specified, it defaults to dex-auth's local
  endpoint constructed from dex-auth's Kubernetes Service DNS name, the
  Service port and Dex's endpoint, that is http://<dex-auth-app-name>.<namespace>.svc:5556/dex.
  The default is set by the charm code, not the configuration option.
  This configuration must be set when using a Dex connector that will try to reach Dex from outside
  the cluster, thus it should be a publicly accessible endpoint, for example https://my-instance.in-my-cloud.some-cloud.com/dex
* port | int

  Default: 5556

  Listening port
* public-url | string

  DEPRECATED - Please leave empty or use issuer-url instead. This configuration option will be removed soon.
  It has been preserved to avoid breaking compatibility with existing deployments.
  Publicly-accessible endpoint for cluster
* static-password | string

  Static password for logging in without an external auth service
* static-username | string

  Static username for logging in without an external auth service