Take control of your large-scale Juju deployments

Juju as a service (JAAS) provides a single location to interact, manage and audit your charmed applications using a dashboard or Juju CLI commands.

Main JAAS components

JIMM

The Juju Infinite Model Manager is the backend service responsible for managing Juju controllers. Admins can interact with Jimm through the same Juju cli and Terraform provider.

Dashboard

A graphical user interface to simplify common administrative operations.

Why use JAAS?

Have to manage multiple Juju controllers

JAAS simplifies the provisioning and lifecycle management of controllers and charms at scale, automating activities like model migrations and controller upgrades

Need to meet tighter security and compliance requirements

JAAS offers additional security features like fine grained access control, an SSH proxy to reduce the attack surface area and comprehensive auditing functionalities

Prefer to interact with your system with a web interface

The dashboard offer a simplified way for administrators to perform common administrative operations and monitor the state of the deployment

Enhanced control and visibility
for your Juju deployment

JAAS is your centralised enterprise control plane for Juju deployments.
With JAAS you can:

Drill down to view the details of everything that is deployed inside a model, such as applications, integrations, units, and more.

Execute Juju action from the UI and view the resulting logs to confirm their status.

Perform common administrative operations and apply machine configurations.

Onboard controllers and add, remove or manage user access to models and controllers.

Access the logs from your deployment in a single, centralised location.

Perform complex searches/filters through your entire deployment and share the result through a unique URL.

Familiar experience and tighter
security controls

Centralised Terraform Provider

JAAS can make use of the Juju Terraform provider to apply plans to all managed controllers. The provider supports Oauth client credentials authentication and its access is controlled by the authorisation system.

SSH Proxy

Administrators can use JAAS to SSH into all units of managed controllers, reducing the need to grant access to vast areas of the network. SSH access can be granted through a fine grained entitlement and session logs are kept in a tamper proof audit log.

Single sign on (SSO)

JAAS supports integration with external identity providers through OIDC, enforcing strong authentication on both the cli and the web dashboard

Shallow learning curve

Users who are familiar with Juju will feel right at home with JAAS. Because JAAS can be can be controlled through the Juju cli and Terraform provider, administrators can get productive in no time.