---
title: Charmhub | Deploy Notary-k8s using Charmhub - The Open Operator Collection
description: Deploy the latest version of Notary-k8s as a Kubernetes Operator on any
  cloud.
url: https://charmhub.io/notary-k8s/configurations
---

# Notary-k8s

[Canonical](https://charmhub.io/publisher/canonical "View all packages from Canonical")

* [Canonical](https://charmhub.io/publisher/canonical "View all packages from Canonical")

Platform:

1/stable 64

```
juju deploy notary-k8s --channel 1/stable
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [email](https://charmhub.io/notary-k8s/configurations#email)
* [external-hostname](https://charmhub.io/notary-k8s/configurations#external-hostname)
* [plugin](https://charmhub.io/notary-k8s/configurations#plugin)
* [plugin-config-secret-id](https://charmhub.io/notary-k8s/configurations#plugin-config-secret-id)
* [server](https://charmhub.io/notary-k8s/configurations#server)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* email | string

  Account email for Let's Encrypt (or the chosen ACME server).
  Used to sign CSRs arriving on the acme-certificates integration.
* external-hostname | string

  Set the external hostname that Notary expects to be accessed by all parties.
  This will be used as

  + the subject in the generated self-signed certificates if none are provided,
  + the hostname in the CRLDistributionPoint extension in all certificates created by Notary,
  + the hostname in the OIDC integration used by notary.
* plugin | string

  The LEGO DNS plugin (dns\_provider) used to solve DNS-01 challenges.
  Choose from https://go-acme.github.io/lego/dns
* plugin-config-secret-id | string

  The ID of the Juju user secret holding the credentials required by the selected
  LEGO DNS plugin. Secret keys are the plugin's environment variable names in
  lowercase with dashes instead of underscores, per the LEGO documentation
  (https://go-acme.github.io/lego/dns).
  For example, the route53 plugin needs aws-access-key-id and aws-secret-access-key,
  which are passed to Notary as AWS\_ACCESS\_KEY\_ID and AWS\_SECRET\_ACCESS\_KEY.
* server | string

  ACME server directory URL.
  For example: https://acme-v02.api.letsencrypt.org/directory