---
title: Charmhub | Deploy Oidc Gatekeeper Extended using Charmhub - The Open Operator
  Collection
description: Deploy the latest version of Oidc Gatekeeper Extended as a Kubernetes
  Operator on any cloud.
url: https://charmhub.io/oidc-gatekeeper-extended/configurations
---

# Oidc Gatekeeper Extended

[Ali shalbafzadeh](https://charmhub.io/publisher/alishalbaf "View all packages from Ali shalbafzadeh")

* [Ali shalbafzadeh](https://charmhub.io/publisher/alishalbaf "View all packages from Ali shalbafzadeh")

Platform:

edge 2

```
juju deploy oidc-gatekeeper-extended --channel edge
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [after-login-url](https://charmhub.io/oidc-gatekeeper-extended/configurations#after-login-url)
* [ca-bundle](https://charmhub.io/oidc-gatekeeper-extended/configurations#ca-bundle)
* [client-id](https://charmhub.io/oidc-gatekeeper-extended/configurations#client-id)
* [client-name](https://charmhub.io/oidc-gatekeeper-extended/configurations#client-name)
* [client-secret](https://charmhub.io/oidc-gatekeeper-extended/configurations#client-secret)
* [enable-jwt](https://charmhub.io/oidc-gatekeeper-extended/configurations#enable-jwt)
* [oidc-scopes](https://charmhub.io/oidc-gatekeeper-extended/configurations#oidc-scopes)
* [skip-auth-urls](https://charmhub.io/oidc-gatekeeper-extended/configurations#skip-auth-urls)
* [userid-claim](https://charmhub.io/oidc-gatekeeper-extended/configurations#userid-claim)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* after-login-url | string

  Default: /

  URL to redirect to after a successful login.
* ca-bundle | string

  Custom CA to be trusted by OIDC gatekeeper. It is suggested to have the config:
  ca-bundle: |
  -----BEGIN CERTIFICATE-----
  ....
  -----END CERTIFICATE-----
* client-id | string

  Default: authservice-oidc

  OpenID Connect client ID
* client-name | string

  Default: Ambassador Auth OIDC

  Human-friendly OpenID Connect client name
* client-secret | string

  OpenID Connect client secret
* enable-jwt | boolean

  Enable JWT bearer token authentication alongside cookie-based session auth.
  When enabled, the oidc-authservice will accept Authorization header bearer tokens
  and ID tokens in addition to session cookies.
* oidc-scopes | string

  Default: profile email groups

  OpenID Connect scopes
* skip-auth-urls | string

  If not empty, this is a comma-separated list of paths, e.g. "/path1/,/path2/".
  That list defines which paths do not need to be authenticated on OIDC.
  The DEX path is always added to this list.
* userid-claim | string

  Default: email

  OpenID Connect claim whose value will be used as the userid.