--- title: Charmhub | Deploy Ranger K8s Operator using Charmhub - The Open Operator Collection description: Deploy the latest version of Ranger K8s Operator as a Kubernetes Operator on any cloud. url: https://charmhub.io/ranger-k8s/configurations --- # Ranger K8s Operator [Business Data](https://charmhub.io/publisher/businessdata "View all packages from Business Data") * [Business Data](https://charmhub.io/publisher/businessdata "View all packages from Business Data") Platform: stable 33 ``` juju deploy ranger-k8s ``` [Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications) * [charm-function](https://charmhub.io/ranger-k8s/configurations#charm-function) * [external-hostname](https://charmhub.io/ranger-k8s/configurations#external-hostname) * [lookup-timeout](https://charmhub.io/ranger-k8s/configurations#lookup-timeout) * [policy-mgr-url](https://charmhub.io/ranger-k8s/configurations#policy-mgr-url) * [ranger-admin-password](https://charmhub.io/ranger-k8s/configurations#ranger-admin-password) * [ranger-usersync-password](https://charmhub.io/ranger-k8s/configurations#ranger-usersync-password) * [sync-group-member-attribute-name](https://charmhub.io/ranger-k8s/configurations#sync-group-member-attribute-name) * [sync-group-object-class](https://charmhub.io/ranger-k8s/configurations#sync-group-object-class) * [sync-group-search-base](https://charmhub.io/ranger-k8s/configurations#sync-group-search-base) * [sync-group-search-enabled](https://charmhub.io/ranger-k8s/configurations#sync-group-search-enabled) * [sync-group-user-map-sync-enabled](https://charmhub.io/ranger-k8s/configurations#sync-group-user-map-sync-enabled) * [sync-interval](https://charmhub.io/ranger-k8s/configurations#sync-interval) * [sync-ldap-bind-dn](https://charmhub.io/ranger-k8s/configurations#sync-ldap-bind-dn) * [sync-ldap-bind-password](https://charmhub.io/ranger-k8s/configurations#sync-ldap-bind-password) * [sync-ldap-deltasync](https://charmhub.io/ranger-k8s/configurations#sync-ldap-deltasync) * [sync-ldap-group-search-scope](https://charmhub.io/ranger-k8s/configurations#sync-ldap-group-search-scope) * [sync-ldap-search-base](https://charmhub.io/ranger-k8s/configurations#sync-ldap-search-base) * [sync-ldap-url](https://charmhub.io/ranger-k8s/configurations#sync-ldap-url) * [sync-ldap-user-group-name-attribute](https://charmhub.io/ranger-k8s/configurations#sync-ldap-user-group-name-attribute) * [sync-ldap-user-name-attribute](https://charmhub.io/ranger-k8s/configurations#sync-ldap-user-name-attribute) * [sync-ldap-user-object-class](https://charmhub.io/ranger-k8s/configurations#sync-ldap-user-object-class) * [sync-ldap-user-search-base](https://charmhub.io/ranger-k8s/configurations#sync-ldap-user-search-base) * [sync-ldap-user-search-filter](https://charmhub.io/ranger-k8s/configurations#sync-ldap-user-search-filter) * [sync-ldap-user-search-scope](https://charmhub.io/ranger-k8s/configurations#sync-ldap-user-search-scope) * [tls-secret-name](https://charmhub.io/ranger-k8s/configurations#tls-secret-name) [Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration) * charm-function | string Default: admin The function the charm should provide, either `admin` or `usersync`. * external-hostname | string Default: ranger-k8s The DNS listing used for external connections. Will default to the name of the deployed application. * lookup-timeout | int Default: 3000 The default timeout for the resource auto-complete functionality for Ranger service in ms. * policy-mgr-url | string Default: http://ranger-k8s:6080 * ranger-admin-password | string Default: rangerR0cks! The password for Ranger Admin user. Password can not be changed using this property after initial deployment. It can be changed in the UI. Password should be minimum 8 characters with min one alphabet and one numeric. * ranger-usersync-password | string Default: rangerR0cks! The password for the user that synchronizes users and groups from LDAP to Ranger admin. Password can not be changed using this property after initial deployment. It can be changed in the UI. Password should be minimum 8 characters with min one alphabet and one numeric. * sync-group-member-attribute-name | string Default: memberUid The attribute in the Group which specifies members. * sync-group-object-class | string Default: posixGroup The object class corresponding to groups for ldapsearch. * sync-group-search-base | string Search base for ldap groups. If not specified this takes the value of `sync-ldap-search-base`. * sync-group-search-enabled | boolean Default: True Set to true to sync groups without users. * sync-group-user-map-sync-enabled | boolean Default: True Set to true to sync groups without users. * sync-interval | int Default: 3600000 The interval in ms to synchronize the users/groups from ldap. Note: this can not be less than hourly (3600000) for LDAP. * sync-ldap-bind-dn | string The bind domain name for ldap synchronization. * sync-ldap-bind-password | string Default: admin The bind password for ldap synchronization. * sync-ldap-deltasync | boolean Default: True Enable to incrementally sync as opposed to full sync after initial run. * sync-ldap-group-search-scope | string Default: sub Search scope for the groups. Allowed values: `base`, `one` and `sub`. * sync-ldap-search-base | string Search base for ldap users and groups. * sync-ldap-url | string The url of the ldap to synchronize users from. In format `ldap://:`. * sync-ldap-user-group-name-attribute | string Default: memberOf Attribute from user entry whose values would be treated as group values to be pushed into Policy Manager database. * sync-ldap-user-name-attribute | string Default: uid Attribute from user entry that would be treated as user name. * sync-ldap-user-object-class | string Default: person The object class corresponding to users for ldapsearch. * sync-ldap-user-search-base | string Search base for ldap users. * sync-ldap-user-search-filter | string Optional additional filter constraining the users selected for syncing. * sync-ldap-user-search-scope | string Default: sub Search scope for the users. Allowed values: `base`, `one` and `sub`. * tls-secret-name | string Default: ranger-tls Name of the k8s secret which contains the TLS certificate to be used by ingress.