Valkey

Learn about configurations >

• certificate-extra-sans | string

  Config option to add extra-sans to the ones used when requesting server certificates. The extra-sans are specified by comma-separated names to be added when requesting signed certificates. Use "{unit}" as a placeholder to be filled with the unit number, e.g. "worker-{unit}" will be translated as "worker-0" for unit 0 and "worker-1" for unit 1 when requesting the certificate.

• ldap-map | string

  Config option for LDAP integration, to configure the mapping of LDAP group names to pre-configured Valkey authorization groups. The authorization groups are defined via extra entity permissions through Data integrator. Comma-separated list, for example: <ldap_group_1>=<valkey_read>,<ldap_group_2>=<valkey_write>

• ldap-search-attribute | string

  Default: cn

  Config option for LDAP integration, to configure the entry attribute of the LDAP provider when searching for a username. Corresponds to Valkey config ldap.search_attribute.

• ldap-search-dn-attribute | string

  Default: DN

  Config option for LDAP integration, to configure the attribute that contains the DN of the user entry. Corresponds to Valkey config ldap.search_dn_attribute. If the LDAP provider does not return a DN attribute, ensure LDAP users have an email attribute and use mail instead.

• ldap-search-filter | string

  Default: objectClass=posixAccount

  Config option for LDAP integration, to configure the search filter used to filter LDAP directory entries. Corresponds to Valkey config ldap.search_filter.

• system-users | secret

  Configure the internal system users and their passwords. The passwords will be auto-generated if this option is not set. It is for internal use only and SHOULD NOT be used by applications. This needs to be a Juju Secret URI pointing to a secret that contains the following content: username: <password>. The following system users are supported:

  • charmed-operator: administrative user for the charmed valkey operator
  • charmed-replication: used by valkey replica instances to connect to the primary
  • charmed-stats: used by the metrics exporter to connect to valkey
  • charmed-sentinel-operator: administrative user for operating valkey sentinel
  • charmed-sentinel-valkey: used by sentinel to authenticate against valkey
  • charmed-sentinel-peers: used by sentinel for inter-sentinel authentication

• tls-client-private-key | secret

  A Juju secret URI of a secret containing the private key for client TLS certificates.