--- title: Charmhub | Deploy JIMM-K8S using Charmhub - The Open Operator Collection description: Deploy the latest version of JIMM-K8S as a Kubernetes Operator on any cloud. url: https://charmhub.io/juju-jimm-k8s/configurations --- # JIMM-K8S [Yellow Squad](https://charmhub.io/publisher/yellow "View all packages from Yellow Squad") * [Yellow Squad](https://charmhub.io/publisher/yellow "View all packages from Yellow Squad") Platform: 3/stable 123 ``` juju deploy juju-jimm-k8s --channel 3/stable ``` [Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications) * [audit-log-retention-period-in-days](https://charmhub.io/juju-jimm-k8s/configurations#audit-log-retention-period-in-days) * [controller-admins](https://charmhub.io/juju-jimm-k8s/configurations#controller-admins) * [cors-allowed-origins](https://charmhub.io/juju-jimm-k8s/configurations#cors-allowed-origins) * [dns-name](https://charmhub.io/juju-jimm-k8s/configurations#dns-name) * [juju-dashboard-location](https://charmhub.io/juju-jimm-k8s/configurations#juju-dashboard-location) * [jwt-expiry](https://charmhub.io/juju-jimm-k8s/configurations#jwt-expiry) * [log-level](https://charmhub.io/juju-jimm-k8s/configurations#log-level) * [macaroon-expiry-duration](https://charmhub.io/juju-jimm-k8s/configurations#macaroon-expiry-duration) * [oauth-client-credential-scopes](https://charmhub.io/juju-jimm-k8s/configurations#oauth-client-credential-scopes) * [oauth-group-claim-key](https://charmhub.io/juju-jimm-k8s/configurations#oauth-group-claim-key) * [oauth-optional-scopes](https://charmhub.io/juju-jimm-k8s/configurations#oauth-optional-scopes) * [postgres-secret-storage](https://charmhub.io/juju-jimm-k8s/configurations#postgres-secret-storage) * [private-key](https://charmhub.io/juju-jimm-k8s/configurations#private-key) * [public-key](https://charmhub.io/juju-jimm-k8s/configurations#public-key) * [secure-session-cookies](https://charmhub.io/juju-jimm-k8s/configurations#secure-session-cookies) * [session-cookie-max-age](https://charmhub.io/juju-jimm-k8s/configurations#session-cookie-max-age) * [session-expiry-duration](https://charmhub.io/juju-jimm-k8s/configurations#session-expiry-duration) * [ssh-host-key-secret-id](https://charmhub.io/juju-jimm-k8s/configurations#ssh-host-key-secret-id) * [ssh-max-concurrent-connections](https://charmhub.io/juju-jimm-k8s/configurations#ssh-max-concurrent-connections) * [ssh-port](https://charmhub.io/juju-jimm-k8s/configurations#ssh-port) * [uuid](https://charmhub.io/juju-jimm-k8s/configurations#uuid) [Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration) * audit-log-retention-period-in-days | string Default: 0 How long to hold audit logs for in days, i.e., 10 = 10 days. If 0 is set, the logs will never be purged. Logs are purged at 9AM UTC. Defaults to 0. * controller-admins | string Space separated list of email addresses or service accounts that are made controller admins by default. * cors-allowed-origins | string Space separated list of addresses which are allowed to make requests cross-origin. * dns-name | string DNS hostname that JIMM is being served from. * juju-dashboard-location | string Default: https://jaas.ai/models URL of the Juju Dashboard for this controller. * jwt-expiry | string Default: 5m Duration for the JWT expiry (defaults to 5 minutes). This is the JWT JIMM sends to a Juju controller to authenticate model related commands. Increase this if long running websocket connections are failing due to authentication errors. * log-level | string Default: info Level to out log messages at, one of "debug", "info", "warn", "error", "dpanic", "panic", and "fatal". * macaroon-expiry-duration | string Default: 24h Expiry duration for authentication macaroons. * oauth-client-credential-scopes | string Space separated OAuth scopes requested only for the client credentials flow. Specifying additional scopes here will require that service accounts used to authenticate to JIMM will require these additional scopes at creation time. * oauth-group-claim-key | string This is the claim name to be extracted from the OAuth access token that contains the user groups. This is only useful if the identity provider is configured to map group information onto access tokens. If group information is not set as a default scope in the identity provider, then it must also be included in the charm config's "oauth-optional-scopes" and "oauth-client-credential-scopes". When this configuration key is unset, no group scopes are requested. Permissions for the groups can be set via the JIMM plugin for the Juju CLI. * oauth-optional-scopes | string Space separated extra OAuth scopes to request and forward, in addition to JIMM's default OAuth scope request. These scopes are only applied to the authorisation code and device code flows. This is useful for requesting scopes that the identity provider supports but may omit from advertised metadata, such as a group claim scope. * postgres-secret-storage | boolean Enables the use of Postgres for secret storage if Vault is not related. * private-key | string The private part of JIMM's macaroon bakery keypair. * public-key | string The public part of JIMM's macaroon bakery keypair. * secure-session-cookies | boolean Default: True Whether HTTPS must be enabled to set session cookies. * session-cookie-max-age | int Default: 86400 The max age for the session cookies in seconds, on subsequent logins, the session instance extended by this amount. * session-expiry-duration | string Default: 6h Expiry duration for JIMM session tokens. These tokens are used by clients and their expiry determines how frequently a user must login. * ssh-host-key-secret-id | string The secret ID of the SSH host key. * ssh-max-concurrent-connections | int Default: 100 The maximum number of concurrent SSH connections allowed. * ssh-port | int Default: 17022 The port that JIMM will expose the jump server on. * uuid | string The UUID advertised by the JIMM controller.