---
title: Charmhub | Deploy Hydra using Charmhub - The Open Operator Collection
description: Deploy the latest version of Hydra as a Kubernetes Operator on any cloud.
url: https://charmhub.io/hydra/configurations
---

# Hydra

[Identity Charmers](https://charmhub.io/publisher/identity-charmers "View all packages from Identity Charmers")

* [Identity Charmers](https://charmhub.io/publisher/identity-charmers "View all packages from Identity Charmers")

Platform:

stable 396

```
juju deploy hydra
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [cpu](https://charmhub.io/hydra/configurations#cpu)
* [dev](https://charmhub.io/hydra/configurations#dev)
* [initial\_cookie\_secret\_id](https://charmhub.io/hydra/configurations#initial_cookie_secret_id)
* [initial\_system\_secret\_id](https://charmhub.io/hydra/configurations#initial_system_secret_id)
* [jwt\_access\_tokens](https://charmhub.io/hydra/configurations#jwt_access_tokens)
* [log\_level](https://charmhub.io/hydra/configurations#log_level)
* [memory](https://charmhub.io/hydra/configurations#memory)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* cpu | string

  K8s cpu resource limit, e.g. "1" or "500m". Default is unset (no limit). This value is used
  for the "limits" portion of the resource requirements (the "requests" portion is
  automatically deduced from it).
  See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
* dev | boolean

  Run Hydra in dev mode, it is needed if HTTPS is not set up. This should only be used for development purposes.
* initial\_cookie\_secret\_id | secret

  Juju secret id containing the cookie secret key used to encrypt the hydra cookies.

  This config is only used when the application is deployed the first time. On an existing deployment, you
  need to use the `add-secret-key` action.

  All the values from the secret will be used as keys sorted, with the last one being used for both
  encryption and decryption. E.g:
  {
  "1": <secret-1>,
  "2": <secret-2>,
  "3": <secret-3>,
  }

  The length of the secrets must be >16 characters
* initial\_system\_secret\_id | secret

  Juju secret id containing the system secret key used to encrypt database entries.

  This config is only used when the application is deployed the first time. On an existing deployment, you
  need to use the `add-secret-key` action.

  All the values from the secret will be used as keys sorted, with the last one being used for both
  encryption and decryption. E.g:
  {
  "1": <secret-1>,
  "2": <secret-2>,
  "3": <secret-3>,
  }

  The length of the secrets must be >16 characters
* jwt\_access\_tokens | boolean

  Default: True

  Issue JWT access tokens, defaults to True. If set to False, access tokens will be opaque.
* log\_level | string

  Default: info

  The verbosity of logs produced by Hydra.
  Available values are: panic, fatal, error, warn, info, debug, and trace.
* memory | string

  K8s memory resource limit, e.g. "1Gi". Default is unset (no limit). This value is used
  for the "limits" portion of the resource requirements (the "requests" portion is
  automatically deduced from it).
  See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/