Canonical Admin UI is a component for managing the Canonical Identity Platform.
9.7K
ubuntu/identity-platform-admin-ui is a rock for identity-platform-admin-ui maintained by Canonical.
Canonical IAM Admin UI is a component that allows you to interact with the components that are part of the Identity Platform solution.
It provides a set of API to view,modify and delete resources on Ory Kratos, Ory Hydra Ory Oathkeeper and OpenFGA
[Learn more about identity-platform-admin-ui]
NOTE: These tags follow a specific naming convention that respects the concept of channels.
| Tags | Supported until | Version | Base | Architectures | |
|---|---|---|---|---|---|
1-22.04_stable | aliases1-22.04, 1-22.04_beta, 1-22.04_candidate, 1-22.04_edge, 1.25-22.04_beta, 1.25-22.04_candidate, 1.25-22.04_edge | 08/2026 | 1 | 22.04 | amd64 |
| Tags | Support ended on | Upgrade Path | |
|---|---|---|---|
1.19.0-22.04_stable | aliases1.19.0-22.04 | 11/2024 | - |
1.22-22.04_candidate | aliases1.22-22.04_beta1.22-22.04_edge | 12/2024 | - |
1.19.0-22.04_candidate | aliases1.19.0-22.04_beta1.19.0-22.04_edge | 11/2024 | - |
1.23-22.04_candidate | aliases1.23-22.04_beta1.23-22.04_edge | 03/2025 | - |
1.24-22.04_candidate | aliases1.24-22.04_beta1.24-22.04_edge | 06/2025 | - |
1.21.0-22.04_candidate | aliases1.21.0-22.04_beta1.21.0-22.04_edge | 11/2024 | - |
This rock's entrypoint is Pebble, a container-optimized init process that enables the orchestration of a collection of local service processes as an organized set.
To view the Pebble services and checks defined in this rock:
docker run --rm ubuntu/identity-platform-admin-ui:1.19.0-22.04_stable plan
To run this rock, use any of the usual container runtimes, for example, docker:
docker run --name identity-platform-admin-ui-container \
-p 8080:8080 \
ubuntu/identity-platform-admin-ui:1.19.0-22.04_stable
Access the API at http://localhost:8080.
To view the logs of the running container, run:
docker exec identity-platform-admin-ui-container pebble logs
Or, for a specific service:
docker exec identity-platform-admin-ui-container pebble logs <service>
Rocks may have predefined health checks that you can list by running:
docker exec identity-platform-admin-ui-container pebble checks
The overall health of your container can be inspected via:
docker exec identity-platform-admin-ui-container pebble health
| Option | Description | Default |
|---|---|---|
OTEL_GRPC_ENDPOINT | Tracing server GRPC endpoint, e.g., tempo-0.tempo-endpoints.stg-identity-jaas-dev.svc.cluster.local:4317. Has priority on OTEL_HTTP_ENDPOINT. | None |
OTEL_HTTP_ENDPOINT | Tracing server HTTP endpoint, e.g., http://tempo-0.tempo-endpoints.stg-identity-jaas-dev.svc.cluster.local:4318. | None |
TRACING_ENABLED | Tracing enablement, e.g., true. | None |
LOG_FILE | Destination file for logs, e.g., log.txt. | None |
LOG_LEVEL | Log level, e.g., error. | None |
HYDRA_ADMIN_URL | Hydra Admin API URL, used to manage clients, e.g., http://hydra.io:4445. | None |
KRATOS_ADMIN_URL | Kratos Admin API URL, used to manage identities, e.g., http://kratos.io:4434. | None |
KRATOS_PUBLIC_URL | Kratos Public API URL, used to manage identities, e.g., http://kratos.io:4433. | None |
OATHKEEPER_PUBLIC_URL | Oathkeeper Public API URL, used to manage rules. | None |
BASE_URL | Public URL Login UI will be served from, e.g., https://iam.io/dev/path. | None |
ACCESS_TOKEN_VERIFICATION_STRATEGY | Strategy used to verify JWT tokens. | None |
AUTHENTICATION_ENABLED | Authentication enable flag. | "false" |
AUTHORIZATION_ENABLED | Authorization enable flag. | "false" |
CONTEXT_PATH | Path needed by the UI to work behind an ingress proxy. | None |
IDP_CONFIGMAP_NAME | Name of kubernetes configmap where Kratos IDP are configured. | None |
IDP_CONFIGMAP_NAMESPACE | Namespace of kubernetes configmap where Kratos IDP are configured. | None |
RULES_CONFIGMAP_NAME | Name of kubernetes configmap where Oathkeeper rules are configured. | None |
RULES_CONFIGMAP_NAMESPACE | Namespace of kubernetes configmap where Oathkeeper rules are configured. | None |
RULES_CONFIGMAP_FILENAME | Name of the file where Oathkeeper rules are configured. | None |
SCHEMAS_CONFIGMAP_NAME | Name of kubernetes configmap where Kratos identity schemas are configured. | None |
SCHEMAS_CONFIGMAP_NAMESPACE | Namespace of kubernetes configmap where Kratos identity schemas are configured. | None |
MAIL_FROM_ADDRESS | Email sender. Required. | None |
MAIL_HOST | SMPT server host. Required. | None |
MAIL_PORT | SMTP server port. Required. | None |
MAIL_USERNAME | SMTP username. If present, both username and password are used. | None |
MAIL_PASSWORD | SMTP password. | None |
OAUTH2_AUTH_COOKIES_ENCRYPTION_KEY | Key used to encrypt authentication cookies. | None |
OAUTH2_CLIENT_ID | OAuth2 client ID, needed for OIDC authentication. | None |
OAUTH2_CLIENT_SECRET | OAuth2 client secret, needed for OIDC authentication. | None |
OAUTH2_CODEGRANT_SCOPES | OAuth2 scopes needed by the application, needed for OIDC authentication. | openid,offline_access |
OAUTH2_REDIRECT_URI | OAuth2 redirect URI, e.g.'https://iam..io/dev/api/v0/auth/callback', where /api/v0/auth/callback is the endpoint used by the application, needed for OIDC authentication. | None |
OIDC_ISSUER | OAuth2 server issuer. | None |
OPENFGA_API_HOST | OpenFGA server address. | None |
OPENFGA_API_SCHEME | OpenFGA server scheme, either 'http' or 'https'. | None |
OPENFGA_API_TOKEN | OpenFGA server API token, needed for authentication to the server. | None |
OPENFGA_AUTHORIZATION_MODEL_ID | OpenFGA model ID. | None |
OPENFGA_STORE_ID | OpenFGA store ID. | None |
| Option | Description | Default |
|---|---|---|
-p <port>:8080 | Expose the container's port 8080 on the host's <port>. | None |
| Option | Description | Default |
|---|---|---|
/usr/bin/identity-platform-admin-ui serve | Launch Admin UI web server(s) using environment variables. | None |
Canonical is the provider of this container image. It is the user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within, as well as with Canonical’s IP Policy.
Content type
Image
Digest
sha256:71eee354b…
Size
22.2 MB
Last updated
5 months ago
docker pull ubuntu/identity-platform-admin-ui:1.25-22.04_edgePulls:
74
Last week