---
title: Charmhub | Deploy Oidc Gatekeeper using Charmhub - The Open Operator Collection
description: Deploy the latest version of Oidc Gatekeeper as a Kubernetes Operator
  on any cloud.
url: https://charmhub.io/oidc-gatekeeper/configurations
---

# Oidc Gatekeeper

[Kubeflow Charmers](https://charmhub.io/publisher/ckfbot "View all packages from Kubeflow Charmers")

* [Kubeflow Charmers](https://charmhub.io/publisher/ckfbot "View all packages from Kubeflow Charmers")
* [Containers](https://charmhub.io/?filter=containers)
* [Security](https://charmhub.io/?filter=security)

Platform:

ckf-1.10/stable 642

```
juju deploy oidc-gatekeeper --channel ckf-1.10/stable
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [ca-bundle](https://charmhub.io/oidc-gatekeeper/configurations#ca-bundle)
* [client-id](https://charmhub.io/oidc-gatekeeper/configurations#client-id)
* [client-name](https://charmhub.io/oidc-gatekeeper/configurations#client-name)
* [client-secret](https://charmhub.io/oidc-gatekeeper/configurations#client-secret)
* [oidc-scopes](https://charmhub.io/oidc-gatekeeper/configurations#oidc-scopes)
* [skip-auth-urls](https://charmhub.io/oidc-gatekeeper/configurations#skip-auth-urls)
* [userid-claim](https://charmhub.io/oidc-gatekeeper/configurations#userid-claim)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* ca-bundle | string

  Custom CA to be trusted by OIDC gatekeeper. It is suggested to have the config:
  ca-bundle: |
  -----BEGIN CERTIFICATE-----
  ....
  -----END CERTIFICATE-----
* client-id | string

  Default: authservice-oidc

  OpenID Connect client ID
* client-name | string

  Default: Ambassador Auth OIDC

  Human-friendly OpenID Connect client name
* client-secret | string

  OpenID Connect client secret
* oidc-scopes | string

  Default: profile email groups

  OpenID Connect scopes
* skip-auth-urls | string

  If not empty, this is a comma-separated list of paths, e.g. "/path1/,/path2/".
  That list defines which paths do not need to be authenticated on OIDC.
  The DEX path is always added to this list.
* userid-claim | string

  Default: email

  OpenID Connect claim whose value will be used as the userid.