---
title: Charmhub | Deploy Identity Platform using Charmhub - The Open Operator Collection
description: Deploy the latest version of Identity Platform as a Kubernetes Operator
  on any cloud.
url: https://charmhub.io/identity-platform/configurations/kratos
---

##### We've discontinued the registration of new Bundles

New Bundle registrations are no longer accepted. Existing bundles remain functional. We recommend using the Juju Terraform Provider for new deployments.

[Learn more](https://discourse.charmhub.io/t/discontinuing-new-charmhub-bundle-registrations/15344)

# Identity Platform

[Identity Charmers](https://charmhub.io/publisher/identity-charmers "View all packages from Identity Charmers")
| bundle

* [Identity Charmers](https://charmhub.io/publisher/identity-charmers "View all packages from Identity Charmers")
  | bundle

Platform:

edge 39

```
juju deploy identity-platform --channel edge
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [Hydra](https://charmhub.io/identity-platform/configurations/hydra)
* [Identity Platform Login Ui Operator](https://charmhub.io/identity-platform/configurations/identity-platform-login-ui-operator)
* [Kratos](https://charmhub.io/identity-platform/configurations/kratos)
* [Kratos External Idp Integrator](https://charmhub.io/identity-platform/configurations/kratos-external-idp-integrator)
* [Postgresql K8S](https://charmhub.io/identity-platform/configurations/postgresql-k8s)
* [Self Signed Certificates](https://charmhub.io/identity-platform/configurations/self-signed-certificates)
* [Traefik K8S](https://charmhub.io/identity-platform/configurations/traefik-k8s)
* [Traefik K8S](https://charmhub.io/identity-platform/configurations/traefik-k8s)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* cpu | string

  K8s cpu resource limit, e.g. "1" or "500m". Default is unset (no limit). This value is used
  for the "limits" portion of the resource requirements (the "requests" portion is
  automatically deduced from it).
  See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
* default\_identity\_schema\_id | string

  The default identity schema id, this option only works when `identity\_schemas` is defined
* dev | boolean

  Run Kratos on dev mode, it is needed if HTTPS is not set up. This should only be used for development purposes.
* enable\_local\_idp | boolean

  Default: True

  Enable Kratos Identity Provider
* enable\_oidc\_webauthn\_sequencing | boolean

  Enforce setting up a WebAuthn key (e.g. with YubiKey or Google Password Manager on Android)
  after signing in with an external identity provider. Requires `enable\_passwordless\_login\_method=False`.
  WARNING: Do not enable this option unless you are sure that this feature applies to your deployment.
* enable\_passwordless\_login\_method | boolean

  Enable passwordless authentication via webauthn. Requires `enable\_local\_idp=True`.
* enforce\_mfa | boolean

  Default: True

  Enforce users to set up and use multi factor authentication.
  Disabling this option will allow users to log in with password or webauthn without completing 2fa.
* http\_proxy | string

  URL of the HTTP proxy eg http://proxy.internal:6666, it will set the HTTP\_PROXY var in the workload environment
* https\_proxy | string

  URL of the HTTPS proxy eg http://proxy.internal:6666, it will set the HTTPS\_PROXY var in the workload environment
* identity\_schemas | string

  A mapping of schema\_id to identity schemas. For example:
  {
  "user\_v0": {
  "$id": "https://schemas.ory.sh/presets/kratos/quickstart/email-password/identity.schema.json",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "title": "Person",
  "type": "object",
  "properties": {
  "traits": {
  "type": "object",
  "properties": {
  "email": {
  "type": "string",
  "format": "email",
  "title": "E-Mail",
  "minLength": 3,
  "ory.sh/kratos": {
  "verification": {
  "via": "email"
  }
  }
  },
  "name": {
  "type": "string"
  }
  }
  },
  "additionalProperties": true
  }
  }
  }
* log\_level | string

  Default: info

  The verbosity of logs produced by Kratos.
  Available values are: panic, fatal, error, warn, info, debug, and trace.
* memory | string

  K8s memory resource limit, e.g. "1Gi". Default is unset (no limit). This value is used
  for the "limits" portion of the resource requirements (the "requests" portion is
  automatically deduced from it).
  See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
* no\_proxy | string

  Domains that need to be excluded from proxying no\_proxy="test.com,test.co.uk", it is a comma separate list
* recovery\_email\_template | string

  The custom html template used to send emails with recovery codes. For example:
  Hi,
  Please enter the following code to recover your account:
  {{ .RecoveryCode }}