Deploy a cluster in Azure Government¶

When you finish, a three-node Qumulo cluster runs in an Azure Government region, and you can sign in to its web UI.

Before you start¶

An Azure Government subscription
A target region from usgovvirginia, usgovtexas, usgoviowa, and usgovarizona
A virtual network and subnet in that region that meet the Azure network prerequisites
An identity that holds the Azure permissions the provider needs
The Azure CLI and Terraform 1.11 or later

az cloud set --name AzureUSGovernment
az login
az cloud show --query name -o tsv

The last command prints AzureUSGovernment.

2. Copy the configuration¶

Save this as main.tf in an empty directory.

terraform {
  required_version = ">= 1.11"
  required_providers {
    qumulo = {
      source  = "qumulo-terraform-registry.s3.us-east-1.amazonaws.com/qumulo/qumulo"
      version = "~> 1.0"
    }
  }
}

provider "qumulo" {
  azure {
    subscription_id = "00000000-0000-0000-0000-000000000000" # <-- Replace with your Azure Government subscription ID
    environment     = "usgovernment"
  }
}

resource "qumulo_filesystem_azure" "cluster" {
  cluster_name             = "qumulogov"
  deployment_name          = "qumulogov"
  location                 = "usgovvirginia" # <-- Replace with your Azure Government region
  resource_group_name      = "rg-qumulo-gov"
  subnet_id                = "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-network/providers/Microsoft.Network/virtualNetworks/vnet-main/subnets/subnet-qumulo" # <-- Replace with your subnet resource ID
  node_count               = 3
  vm_type                  = "Standard_L8s_v3"
  cluster_product_type     = "HOT"
  storage_replication_type = "LRS"
  storage_class            = "STANDARD"
  admin_password           = "YourSecurePassword123!" # <-- Replace with your admin password
  allow_cidrs              = ["10.0.0.0/8"]           # <-- Replace with your client networks
  deletion_protection      = true
}

output "endpoint_ips" {
  value = qumulo_filesystem_azure.cluster.endpoint_ips
}

output "web_ui" {
  value = "https://${qumulo_filesystem_azure.cluster.endpoint_ips[0]}"
}

Replace the five values marked <-- Replace, and leave the rest as written. The environment = "usgovernment" line points the provider at Azure Government endpoints.

3. Apply¶

terraform init -upgrade
terraform plan
terraform apply

The plan ends with Plan: 1 to add, 0 to change, 0 to destroy. The apply runs for up to 90 minutes and ends with Apply complete! Resources: 1 added, 0 changed, 0 destroyed., followed by the endpoint_ips and web_ui outputs.

4. Check the cluster¶

Open the web_ui address in a browser on a network inside allow_cidrs, and accept the cluster's self-signed certificate. Sign in as admin with the password you set, and the web UI shows the cluster named qumulogov.

Next¶

Add availability zones, your own identities, or private endpoints with Deploy a production Azure cluster. Private DNS zones in Azure Government use their own names, listed in Azure network prerequisites.