Console and console-services parameters

This configures the interval between purge operations in milliseconds.

Default: 1800000 (30 minutes).

This configures the max number of activity entries each individual purge operation will attempt to delete.

Default: 200,000 (rows).

This configures the number of days after which data will start to be deleted.

Default: 395 (13 months).

An integer representing, in seconds, the classifier synchronization period. This controls how long the node classifier can take to retrieve classes from the primary server.

Default: 600

An integer specifying, in seconds, the interval at which LDAP user details and group membership associations are synchronized.

The default value is 1800 (30 minutes).

This synchronization refreshes the user details and group membership for every LDAP user in the system, regardless of the last time the user logged in. If a user is no longer present in LDAP, all user-group associations are removed from the user and all of the user's known tokens are revoked.

To disable automatic synchronization, set the value to 0 or a negative integer. When disabled, user details and group membership only refresh when the user logs in.

When enabled, various entries are recorded to console-services.log that indicate whether the service is enabled and when each synchronization event has completed.

An array specifying the ciphers to use when establishing connections to configured LDAP servers.

Default: $puppet_enterprise::ssl_cipher_suites. This default value captures the array of ciphers specified by the puppet_enterprise::ssl_cipher_suites parameter. For information on ciphers you can use for console services, see Compatible ciphers.

An integer specifying how many failed login attempts are allowed on an account before the account is revoked.

Default: 10

An integer representing the number of hours that password reset tokens are valid.

An administrator generates these token for users to reset their passwords.

Default: 24

An integer representing, in minutes, how long a user's session can last.

The session length is the same for node classification, RBAC, and the console.

Default: 60

A string representing how long a console session can last.

The value is formatted as a string consisting of a number and an optional suffix representing a unit of time: s (seconds), m (minutes), h (hours), d (days), or y (years).

Example: "1d" (one day)

If the suffix is omitted, the default unit of time is seconds.

A value of "0" sets an unlimited console session time.

To prevent console sessions from expiring before the maximum RBAC token lifetime, set this parameter to "0".

An integer specifying, in seconds, the interval after the timeout warning message appears until the console session expires due to inactivity.

Default: 120

An integer specifying, in seconds, the interval at which the UI polls the server to determine whether the user is active.

Default: 60

A string representing the default authentication lifetime for a token.

The value is formatted as a string consisting of a number followed by a suffix representing a unit of time: y (years), d (days), h (hours), m (minutes), or s (seconds).

Default: "1h" (one hour)

A string representing the maximum allowable lifetime for all tokens.

The value is formatted as a string consisting of a number followed by a suffix representing a unit of time: y (years), d (days), h (hours), m (minutes), or s (seconds).

Default: 10y (10 years)

An integer representing the port that the console listens on.

Default: 443

A string containing an IP address repesenting the console's NGINX listen address.

Default: "0.0.0.0"

An integer representing the number of days to wait before pruning the node classifier database. The node classifier database contains node check-in history if classifier_node_check_in_storage is enabled.

Set the value to 0 to never prune the node classifier database.

Default: 7 (days), but only has data to prune if classifier_node_check_in_storage is true.

A Boolean specifying whether to create records when nodes check in with the node classifier. These records describe how nodes match the node groups they're classified into.

Set to true to enable node check-in storage. Enabling this parameter is required to use Nodes check-in history endpoints.

Set to false to disable node check-in storage.

Default: false

A Boolean indicating whether to show timestamps in the local time or UTC.

Set to true to display timestamps in local time with hover text showing the equivalent UTC time.

Set to false to show timestamps in UTC time with no hover text.

Default: false

Specifies the location of the disclaimer.txt file containing disclaimer content that can appear on the console login page if you Create a custom login disclaimer.

Default: "/etc/puppetlabs/console-services"

An integer specifying the SSL port that the node classifier is served on.

Default: 4433

Length of time, in seconds, before a node is considered unresponsive.

Default: 3600 (seconds)

For more information, refer to Node run statuses .

The password to log into the console as the admin.

Example: "myconsolepassword"

Default: Specified during installation.