---
title: Charmhub | Deploy Hydra using Charmhub - The Open Operator Collection
description: Deploy the latest version of Hydra as a Kubernetes Operator on any cloud.
url: https://charmhub.io/hydra/actions
---

# Hydra

[Identity Charmers](https://charmhub.io/publisher/identity-charmers "View all packages from Identity Charmers")

* [Identity Charmers](https://charmhub.io/publisher/identity-charmers "View all packages from Identity Charmers")

Platform:

stable 396

```
juju deploy hydra
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [add-secret-key](https://charmhub.io/hydra/actions#add-secret-key)
* [create-oauth-client](https://charmhub.io/hydra/actions#create-oauth-client)
* [delete-oauth-client](https://charmhub.io/hydra/actions#delete-oauth-client)
* [get-oauth-client-info](https://charmhub.io/hydra/actions#get-oauth-client-info)
* [get-secret-keys](https://charmhub.io/hydra/actions#get-secret-keys)
* [list-oauth-clients](https://charmhub.io/hydra/actions#list-oauth-clients)
* [reconcile-oauth-clients](https://charmhub.io/hydra/actions#reconcile-oauth-clients)
* [revoke-oauth-client-access-tokens](https://charmhub.io/hydra/actions#revoke-oauth-client-access-tokens)
* [rotate-key](https://charmhub.io/hydra/actions#rotate-key)
* [run-migration](https://charmhub.io/hydra/actions#run-migration)
* [update-oauth-client](https://charmhub.io/hydra/actions#update-oauth-client)

[Learn about actions >](https://juju.is/docs/juju/action)

* add-secret-key

  Adds a new secret key used by hydra to encrypt sensitive data

  Params

  + key
    string

    The key
  + type
    string

    The type of secret to fetch, allowed values are ["system", "cookie"]
* create-oauth-client

  Register an oauth client

  Params

  + audience
    array

    A list with the allowed audience for the client
  + client-secret
    string

    The client's secret, if not provided one will be autogenerated.
  + client-uri
    string

    The client's uri, usually its homepage
  + contacts
    array

    A list of contacts for the client
  + grant-types
    array

    A list with the allowed grant types for the client
  + metadata
    string

    A space-separated string of <key>=<value> with extra information relevant for the client, eg "dept=IT team=alpha". Keys and values containing spaces should be quoted.
  + name
    string

    A user-friendly name given to the client
  + redirect-uris
    array

    A list with the client's redirect\_uri
  + response-types
    array

    A list with the allowed response types for the client
  + scope
    array

    A list with the allowed scopes for the client
  + token-endpoint-auth-method
    string

    The authentication method the client may use at the token endpoint.
* delete-oauth-client

  Delete an oauth client

  Params

  + client-id
    string

    The client\_id

  Required

  client-id
* get-oauth-client-info

  Get an oauth client's information

  Params

  + client-id
    string

    The client\_id

  Required

  client-id
* get-secret-keys

  Get all the system or cookie secret keys used by hydra to encrypt sensitive data

  Params

  + type
    string

    The type of secret to fetch, allowed values are ["system", "cookie"]
* list-oauth-clients

  List all oauth clients
* reconcile-oauth-clients

  Clean up clients that were created by the oauth relation
* revoke-oauth-client-access-tokens

  Delete an oauth client's access tokens

  Params

  + client-id
    string

    The client\_id

  Required

  client-id
* rotate-key

  Rotate the jwk used for signing tokens

  Params

  + algorithm
    string

    The algorithm that should be used
* run-migration

  Run a migration, this is needed after upgrades. This is a non-reversible operation. Run this after backing up the database.

  Params

  + timeout
    number

    Timeout after which the migration will be canceled
* update-oauth-client

  Update an oauth client

  Params

  + audience
    array

    A list with the allowed audience for the client
  + client-id
    string

    The client\_id
  + client-secret
    string

    The client's secret, if not provided one will be autogenerated.
  + client-uri
    string

    The client's uri, usually its homepage
  + contacts
    array

    A list of contacts for the client
  + grant-types
    array

    A list with the allowed grant types for the client
  + metadata
    string

    A comma-separated string of <key>=<value> with extra information relevant for the client, eg dept=IT
  + name
    string

    A user-friendly name given to the client
  + redirect-uris
    array

    A list with the client's redirect\_uri
  + response-types
    array

    A list with the allowed response types for the client
  + scope
    array

    A list with the allowed scopes for the client
  + token-endpoint-auth-method
    string

    The authentication method the client may use at the token endpoint.

  Required

  client-id