Set web UI session and banner settings

When you finish, the cluster's web UI signs out idle sessions after 15 minutes and shows your notice on its sign-in screen.

Before you start

• A Qumulo cluster whose REST API on port 8000 you can reach from this machine
• An admin account on the cluster for the connection profile
• Terraform 1.11 or later

1. Copy the configuration

Save this as main.tf in an empty directory.

terraform {
  required_version = ">= 1.11"
  required_providers {
    qumulo = {
      source  = "qumulo-terraform-registry.s3.us-east-1.amazonaws.com/qumulo/qumulo"
      version = "~> 1.0"
    }
  }
}

provider "qumulo" {
  connection_profiles = [
    {
      name                 = "cluster1"
      endpoint             = "https://cluster.example.com:8000" # <-- Replace with your cluster's REST API endpoint
      username             = "admin"
      password             = "YourClusterPassword123!" # <-- Replace with your admin password
      insecure_skip_verify = true
    },
  ]
}

resource "qumulo_web_ui_settings" "main" {
  connection_profile = "cluster1"

  inactivity_timeout_seconds = 900

  # <-- Replace the banner text with your organization's notice
  login_banner = <<-EOT
    ## Authorized Access Only

    This system is for authorized use only. All activity may be monitored and recorded.
  EOT
}

Replace the three values marked <-- Replace, and leave the rest as written. Delete insecure_skip_verify if the cluster's certificate is signed by a CA your machine trusts.

2. Choose the timeout and the banner

• The 900-second timeout matches the 15 minutes that PCI-DSS and FedRAMP call for. Any value of 60 seconds or more works.
• To turn off automatic sign-out, delete the inactivity_timeout_seconds line.
• The banner takes Markdown, up to 10 KB of it. To show no banner, delete the login_banner block.

The plan in step 3 shows the timeout and the full banner text.

3. Apply

terraform init -upgrade
terraform plan
terraform apply

The plan ends with Plan: 1 to add, 0 to change, 0 to destroy. The apply ends with Apply complete! Resources: 1 added, 0 changed, 0 destroyed.

4. Check the sign-in screen

Open the cluster's web UI in a private browser window. The sign-in screen shows your banner, and a session left idle for 15 minutes signs itself out.

Next

Qumulo documents the login banner and the inactivity timeout, and removing the qumulo_web_ui_settings block later resets both to their defaults. The qumulo_web_ui_settings reference describes both attributes, Sign in with SAML sends people through your identity provider, Manage several clusters from one configuration applies the same banner across a fleet, and the cluster troubleshooting guide helps if a step fails.