Take control of your large-scale Juju deployments
JAAS is Juju for enterprise.
Main JAAS components
Backend API server (JIMM)
JAAS has a backend API server (JIMM) that is responsible for managing all interactions with the downstream Juju controllers.
Admins and users can interact with this service through the same Juju CLI and Terraform Provider for Juju.
Dashboard
A graphical user interface to simplify common administrative operations.
Why use JAAS?
Have to manage multiple Juju controllers
JAAS simplifies the provisioning and lifecycle management of controllers and charms at scale, automating activities like model migrations and controller upgrades.
Need to meet tighter security and compliance requirements
JAAS offers additional security features like single sign-on (SSO) on both the dashboard and the CLI, permission management, fine-grained Juju controller activity auditing, and soon an SSH proxy and service accounts for the Terraform provider.
Prefer to interact with your system with a web interface
The dashboard offers a simplified way for administrators to perform common administrative operations and monitor the state of the deployment.
Enhanced control and visibility
for your Juju deployment
JAAS is your centralized enterprise control plane for Juju deployments.
With JAAS you can:
Drill down to view the details of everything that is deployed inside a model, such as applications, integrations, units, and more.
Execute Juju action from the UI and view the resulting logs to confirm their status.
Perform common administrative operations and apply machine configurations.
Onboard controllers and add, remove, or manage user access to models and controllers.
Access the logs from your deployment in a single, centralized location.
Perform complex searches/filters through your entire deployment and share the result through a unique URL.
Familiar experience and tighter
security controls
Centralized Terraform Provider
JAAS can make use of the Juju Terraform provider to apply plans to all managed controllers. The provider supports OAuth client credentials authentication and its access is controlled by the authorization system.
SSH Proxy
(Coming soon)
Administrators can use JAAS to SSH into all units of managed controllers, reducing the need to grant access to vast areas of the network.
SSH access can be granted through a fine-grained entitlement and session logs are kept in a tamper-proof audit log.
Single sign-on (SSO)
JAAS supports integration with external identity providers through OIDC, enforcing strong authentication on both the CLI and the web dashboard.
JAAS is available
through Ubuntu Pro
Ubuntu Pro is Canonical's comprehensive subscription for open source security, support, and compliance.
Ubuntu Pro allows you to deploy JAAS on your infrastructure with long-term support and security maintenance for all workloads modeled by Juju. It provides:
- JAAS charms and sample Terraform plan
- Access to our world-class technical team and knowledge base
- Security patching for all your software, for up to 15 years
- Option of a dedicated Canonical support engineer on your premises
- 24/7 phone, portal, and email support (optional)
