---
title: Charmhub | Deploy Keystone Kerberos using Charmhub - The Open Operator Collection
description: Deploy the latest version of Keystone Kerberos on any cloud.
url: https://charmhub.io/keystone-kerberos/configurations
---

# Keystone Kerberos

[OpenStack Charmers](https://charmhub.io/publisher/openstack-charmers "View all packages from OpenStack Charmers")

* [OpenStack Charmers](https://charmhub.io/publisher/openstack-charmers "View all packages from OpenStack Charmers")
* [Cloud](https://charmhub.io/?filter=cloud)
* [Logging Tracing](https://charmhub.io/?filter=logging-tracing)
* [Security](https://charmhub.io/?filter=security)

Platform:

24.04

23.10

23.04

22.10

22.04

20.04

18.04

yoga/stable d708cbe

```
juju deploy keystone-kerberos --channel yoga/stable
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [debug](https://charmhub.io/keystone-kerberos/configurations#debug)
* [display-name](https://charmhub.io/keystone-kerberos/configurations#display-name)
* [kerberos-domain](https://charmhub.io/keystone-kerberos/configurations#kerberos-domain)
* [kerberos-realm](https://charmhub.io/keystone-kerberos/configurations#kerberos-realm)
* [kerberos-server](https://charmhub.io/keystone-kerberos/configurations#kerberos-server)
* [ssl\_ca](https://charmhub.io/keystone-kerberos/configurations#ssl_ca)
* [ssl\_cert](https://charmhub.io/keystone-kerberos/configurations#ssl_cert)
* [ssl\_key](https://charmhub.io/keystone-kerberos/configurations#ssl_key)
* [use-internal-endpoints](https://charmhub.io/keystone-kerberos/configurations#use-internal-endpoints)
* [use-syslog](https://charmhub.io/keystone-kerberos/configurations#use-syslog)
* [verbose](https://charmhub.io/keystone-kerberos/configurations#verbose)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* debug | boolean

  Enable debug logging
* display-name | string

  Default: keystone-kerberos

  Custom name for UI
* kerberos-domain | string

  Default: k8s

  The OpenStack domain against which Kerberos authentication should be
  used.
* kerberos-realm | string

  The domain over which a Kerberos authentication server has the authority
  to authenticate a user, host or service. It is often the upper case
  version fo the name of the DNS domain over which is presides,
  i.e REALM.COM. Must be in caps.
* kerberos-server | string

  Kerberos server name. Typically, the server name is composed of a name
  followed by the realm name, i.e, krb5.realm.com
* ssl\_ca | string

  TLS CA to use to communicate with other components in a deployment.
  .
  **NOTE**: This configuration option will take precedence over any
  certificates received over the `certificates` relation.
* ssl\_cert | string

  TLS certificate to install and use for any listening services.
  .
  **NOTE**: This configuration option will take precedence over any
  certificates received over the `certificates` relation.
* ssl\_key | string

  TLS key to use with certificate specified as `ssl_cert`.
  .
  **NOTE**: This configuration option will take precedence over any
  certificates received over the `certificates` relation.
* use-internal-endpoints | boolean

  Openstack mostly defaults to using public endpoints for
  internal communication between services. If set to True this option
  will configure services to use internal endpoints where possible.
* use-syslog | boolean

  Setting this to True will allow supporting services to log to syslog.
* verbose | boolean

  Enable verbose logging