JIMM-K8S

Learn about configurations >

• audit-log-retention-period-in-days | string

  Default: 0

  How long to hold audit logs for in days, i.e., 10 = 10 days. If 0 is set, the logs will never be purged. Logs are purged at 9AM UTC. Defaults to 0.

• controller-admins | string

  Space separated list of email addresses or service accounts that are made controller admins by default.

• cors-allowed-origins | string

  Space separated list of addresses which are allowed to make requests cross-origin.

• dns-name | string

  DNS hostname that JIMM is being served from.

• juju-dashboard-location | string

  Default: https://jaas.ai/models

  URL of the Juju Dashboard for this controller.

• jwt-expiry | string

  Default: 5m

  Duration for the JWT expiry (defaults to 5 minutes). This is the JWT JIMM sends to a Juju controller to authenticate model related commands. Increase this if long running websocket connections are failing due to authentication errors.

• log-level | string

  Default: info

  Level to out log messages at, one of "debug", "info", "warn", "error", "dpanic", "panic", and "fatal".

• macaroon-expiry-duration | string

  Default: 24h

  Expiry duration for authentication macaroons.

• oauth-client-credential-scopes | string

  Space separated OAuth scopes requested only for the client credentials flow. Specifying additional scopes here will require that service accounts used to authenticate to JIMM will require these additional scopes at creation time.

• oauth-group-claim-key | string

  This is the claim name to be extracted from the OAuth access token that contains the user groups. This is only useful if the identity provider is configured to map group information onto access tokens.

  If group information is not set as a default scope in the identity provider, then it must also be included in the charm config's "oauth-optional-scopes" and "oauth-client-credential-scopes".

  When this configuration key is unset, no group scopes are requested. Permissions for the groups can be set via the JIMM plugin for the Juju CLI.

• oauth-optional-scopes | string

  Space separated extra OAuth scopes to request and forward, in addition to JIMM's default OAuth scope request. These scopes are only applied to the authorisation code and device code flows.

  This is useful for requesting scopes that the identity provider supports but may omit from advertised metadata, such as a group claim scope.

• postgres-secret-storage | boolean

  Enables the use of Postgres for secret storage if Vault is not related.

• private-key | string

  The private part of JIMM's macaroon bakery keypair.

• public-key | string

  The public part of JIMM's macaroon bakery keypair.

• secure-session-cookies | boolean

  Default: True

  Whether HTTPS must be enabled to set session cookies.

• session-cookie-max-age | int

  Default: 86400

  The max age for the session cookies in seconds, on subsequent logins, the session instance extended by this amount.

• session-expiry-duration | string

  Default: 6h

  Expiry duration for JIMM session tokens. These tokens are used by clients and their expiry determines how frequently a user must login.

• ssh-host-key-secret-id | string

  The secret ID of the SSH host key.

• ssh-max-concurrent-connections | int

  Default: 100

  The maximum number of concurrent SSH connections allowed.

• ssh-port | int

  Default: 17022

  The port that JIMM will expose the jump server on.

• uuid | string

  The UUID advertised by the JIMM controller.