Charmed OpenShell¶
Charmed OpenShell runs the NVIDIA OpenShell gateway on Canonical Kubernetes with Juju, and creates its sandboxes as LXD instances on a MicroCloud.
Charmed OpenShell is alpha software. Its implementation details are subject to change.
OpenShell runs AI agents in sandboxes whose file, network and credential access is governed by policy. Charmed OpenShell deploys and operates the gateway that manages them: it connects the gateway to PostgreSQL, to the Canonical Identity Platform for sign-in and to the Canonical Observability Stack, keeps its certificates and keys, and enforces TLS and role-based access.
This documentation covers deploying and operating the gateway. For using OpenShell itself, such as creating sandboxes, writing policies and configuring providers, see the OpenShell documentation.
In this documentation¶
- How-to guides
Deploy Charmed OpenShell on a MicroCloud, connect the
openshellCLI, and rotate the gateway’s credentials.- Reference
Supported versions, the charm’s relations and actions, and the Terraform modules.
- Explanation
How the deployment fits together, and its security model.
Project and community¶
Charmed OpenShell is a member of the Canonical family. It’s an open source project that welcomes community contributions, suggestions, fixes and constructive feedback.