--- title: Charmhub | Deploy Repo Policy Compliance using Charmhub - The Open Operator Collection description: Deploy the latest version of Repo Policy Compliance as a Kubernetes Operator on any cloud. url: https://charmhub.io/repo-policy-compliance/configurations --- # Repo Policy Compliance [Canonical IS DevOps](https://charmhub.io/publisher/canonical-is-devops "View all packages from Canonical IS DevOps") * [Canonical IS DevOps](https://charmhub.io/publisher/canonical-is-devops "View all packages from Canonical IS DevOps") Platform: stable 113 ``` juju deploy repo-policy-compliance ``` [Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications) * [charm\_token](https://charmhub.io/repo-policy-compliance/configurations#charm_token) * [flask-application-root](https://charmhub.io/repo-policy-compliance/configurations#flask-application-root) * [flask-debug](https://charmhub.io/repo-policy-compliance/configurations#flask-debug) * [flask-env](https://charmhub.io/repo-policy-compliance/configurations#flask-env) * [flask-permanent-session-lifetime](https://charmhub.io/repo-policy-compliance/configurations#flask-permanent-session-lifetime) * [flask-preferred-url-scheme](https://charmhub.io/repo-policy-compliance/configurations#flask-preferred-url-scheme) * [flask-secret-key](https://charmhub.io/repo-policy-compliance/configurations#flask-secret-key) * [flask-session-cookie-secure](https://charmhub.io/repo-policy-compliance/configurations#flask-session-cookie-secure) * [github\_app\_id](https://charmhub.io/repo-policy-compliance/configurations#github_app_id) * [github\_app\_installation\_id](https://charmhub.io/repo-policy-compliance/configurations#github_app_installation_id) * [github\_app\_private\_key](https://charmhub.io/repo-policy-compliance/configurations#github_app_private_key) * [github\_token](https://charmhub.io/repo-policy-compliance/configurations#github_token) * [pull\_request\_disallow\_fork](https://charmhub.io/repo-policy-compliance/configurations#pull_request_disallow_fork) * [webserver-keepalive](https://charmhub.io/repo-policy-compliance/configurations#webserver-keepalive) * [webserver-threads](https://charmhub.io/repo-policy-compliance/configurations#webserver-threads) * [webserver-timeout](https://charmhub.io/repo-policy-compliance/configurations#webserver-timeout) * [webserver-worker-class](https://charmhub.io/repo-policy-compliance/configurations#webserver-worker-class) * [webserver-workers](https://charmhub.io/repo-policy-compliance/configurations#webserver-workers) [Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration) * charm\_token | string The token for the charm to generate new tokens. This is a random secret chosen by you and must be shared with the authenticating client to generate the subsequent one-time token authentication. * flask-application-root | string Path in which the application / web server is mounted. This configuration will set the FLASK\_APPLICATION\_ROOT environment variable. Run `app.config.from_prefixed_env()` in your Flask application in order to receive this configuration. * flask-debug | boolean Whether Flask debug mode is enabled. * flask-env | string What environment the Flask app is running in, by default it's 'production'. * flask-permanent-session-lifetime | int Time in seconds for the cookie to expire in the Flask application permanent sessions. This configuration will set the FLASK\_PERMANENT\_SESSION\_LIFETIME environment variable. Run `app.config.from_prefixed_env()` in your Flask application in order to receive this configuration. * flask-preferred-url-scheme | string Default: HTTPS Scheme for generating external URLs when not in a request context in the Flask application. By default, it's "HTTPS". This configuration will set the FLASK\_PREFERRED\_URL\_SCHEME environment variable. Run `app.config.from_prefixed_env()` in your Flask application in order to receive this configuration. * flask-secret-key | string The secret key used for securely signing the session cookie and for any other security related needs by your Flask application. This configuration will set the FLASK\_SECRET\_KEY environment variable. Run `app.config.from_prefixed_env()` in your Flask application in order to receive this configuration. * flask-session-cookie-secure | boolean Set the secure attribute in the Flask application cookies. This configuration will set the FLASK\_SESSION\_COOKIE\_SECURE environment variable. Run `app.config.from_prefixed_env()` in your Flask application in order to receive this configuration. * github\_app\_id | string The app or client ID of the GitHub App to use for communication with GitHub. If provided, the other github\_app\_\* options must also be provided. The Github App needs to have read permission for Administration. If private repositories are checked, the Github App does also need read permission for Contents and Pull request. Either this or the github\_token must be provided. * github\_app\_installation\_id | string The installation ID of the GitHub App to use for communication with GitHub. If provided, the other github\_app\_\* options must also be provided. The Github App needs to have read permission for Administration. If private repositories are checked, the Github App does also need read permission for Contents and Pull request. Either this or the github\_token must be provided. * github\_app\_private\_key | string The private key of the GitHub App to use for communication with GitHub. If provided, the other github\_app\_\* options must also be provided. The Github App needs to have read permission for Administration. If private repositories are checked, the Github App does also need read permission for Contents and Pull request. Either this or the github\_token must be provided. * github\_token | string The token to use for communication with GitHub. This can be a PAT (with repo scope) or a fine-grained token with read permission for Administration. If private repositories are checked, the fine-grained token does also need read permission for Contents and Pull request. Either this or the GitHub App configuration must be provided. * pull\_request\_disallow\_fork | boolean Disable runs from forked repository pull requests. This is used to protect private-endpoint runners for security purposes. Blocks all pull request runs from a third party forked repository. It will still allow runs for anyone with write and higher permissions for the repository to run jobs from forks. * webserver-keepalive | int Time in seconds for webserver to wait for requests on a Keep-Alive connection. * webserver-threads | int Run each webserver worker with the specified number of threads. * webserver-timeout | int Time in seconds to kill and restart silent webserver workers. * webserver-worker-class | string The webserver worker process class for handling requests. Can be either 'gevent' or 'sync'. * webserver-workers | int The number of webserver worker processes for handling requests.