Entries filed under: Compliance and Security

Back to Index

IT Automation Digest for November 5, 2012

Posted on
By
Scott Johnston
in
Automation, Cloud, Compliance and Security, DevOps, IaaS
Responses
0 Comments

Never miss an issue: Sign-up for our monthly newsletter.

Announcing Puppet Enterprise 2.0

Posted on
By
Scott Johnston
in
Blog, Compliance and Security, Conferences and Workshops, General News, product release, PuppetConf
Responses
6 Comments »

This morning at PuppetConf Luke Kanies, our founder & CEO, announced a major update of our commercial product, Puppet Enterprise 2.0. As with the first commercial release of Puppet in February this year, our goal behind Puppet Enterprise 2.0 (“PE 2.0”) is to give sysadmins powerful yet easy-to-use IT automation tools to deliver applications faster, manage infrastructure more efficiently, and get actionable insights. We’re obviously excited to see the release take shape and wanted to share the four major new capabilities, all built upon Puppet’s model-based configuration management platform.

First up is the new GUI. Before PE 2.0, in order to use Puppet sysadmins had to learn the Puppet DSL and CLI commands. Not hard, and certainly easier than the alternatives, but still something which stood between them and solving the problem at hand. The new GUI leapfrogs this and, immediately after install, allows them to quickly, visually discover and identify resources in their infrastructure, radically reducing time required to diagnose and solve problems.

Next there’s the new orchestration capability. When confronted with a critical update, such as patching a zero-day vulnerability, sysadmins often have to scramble, logging in to each node to investigate and remediate. With the new PE 2.0 GUI, sysadmins query the state of all infrastructure nodes in parallel. Then, with a single command, they can orchestrate simultaneous updates to all vulnerable nodes and receive one report of the aggregated results. This ability to graphically execute commands simultaneously on a handful of nodes — or an entire data center — provides sysadmins with a powerful, efficient tool for managing change.

And while changes are a fact of life in dynamic IT environments, the new compliance functionality in PE 2.0 helps sysadmins gain better insight into the nature of those changes. Again using the PE 2.0 GUI, sysadmins establish a baseline of the desired state of all infrastructure resources, whether actively managed by Puppet or not. Then, as the infrastructure evolves, they can visually track changes to this desired state, who made them, and when. In addition to supporting change management policies or the requests of auditors, this functionality allows sysadmins to identify resources needing active management, providing a path for gradual, incremental expansion of the automation footprint.

Rounding out the release is the new provisioning capability, initially for Amazon EC2 and VMware. It’s true that Puppet is already being used to configure and manage tens of thousands of nodes in both environments. However, given the agile nature of VM and cloud deployments, our customers were asking for a single command which would quickly create new, fully-configured VM or cloud infrastructure capacity. Not only does this capability reduce the friction of deploying to these environments, by leveraging existing configurations it also provides incremental return.

GUI, orchestration, compliance, provisioning. By integrating them together on our configuration management platform, our intent is for the whole to be greater than the sum of the parts. What this means is that sysadmins can incrementally grow their automation coverage at their own pace, starting as simple as managing a single file across tens of nodes and scaling to fully-automated private and public cloud infrastructures. And regardless of the degree of automation, each additional step enables sysadmins to deliver business results faster, with higher quality and more efficiency, than before.

But don’t take our word for it — try it yourself. Puppet Enterprise 2.0 will be generally available Friday, October 21, Update: new PE 2.0 availability date 11/14 due to security vulnerability. and you can configure and manage up to 10 nodes for free. Register here to receive an email with links to the tarball and docs once they ship.

Automate early and often,
— The Puppet Labs Team

Additional Resources

Introducing Puppet Enterprise 1.2

Posted on
By
Katherine Gray
in
Blog, Compliance and Security, Dashboard, General News, product release, Puppet Enterprise, Solutions, Systems Management
Responses
1 Comment »

Today we’re excited to announce Puppet Enterprise 1.2 with two great new features that give you the intelligence you need to prove you’re in compliance with your change management processes.

With Puppet Enterprise Compliance you set a desired-state for each of your systems and monitor them for any changes, right from our web-based Dashboard, creating a baseline. You’ll be alerted to changes on monitored nodes and you choose to accept or reject each change. Accepted changes will become part of the baseline, and rejected changes will still show up in Dashboard until you manually update the node to your desired state. This helps you create a maintenance to do list, ensuring nothing slips through the cracks.

There are lots of different times this type of monitoring and insight is important. If you have a tremendous amount of change in your environment Puppet Enterprise Compliance monitors priority resources, giving you the agility to act immediately on unapproved changes. Compliance also allows you to track spent time and resources on unmanaged resources that go through periodic, high-volume change, indicating when these troublesome resources are ready for Puppet’s continuous automated management.

With Puppet Enterprise Compliance you can:

  • Confirm changes are in compliance with change management policies
  • Identify unauthorized or unexpected change
  • Improve visibility and enforce accountability across the enterprise
  • Reduce unplanned downtime and improve mean time to repair
  • Gather data to track IT resources and costs
  • Monitor systems under consideration for Puppet automated management

And with Puppet you’re not limited to auditing just content and metadata of files, like other monitoring software. Using built-in Puppet resource types you can also audit user accounts, packages, services, cron jobs, or anything else that Puppet manages. You can even write plug-ins to monitor your custom resources.

Also with this Puppet Enterprise 1.2 release, we’ve solved another compliance headache when it comes to managing user accounts. Puppet Enterprise now has the built-in capability to support best practices for user account management and ensure compliance with internal policies. With Puppet you can assess and make changes on all of your machines with one command, without the availability risks you find in central directory software. Puppet even manages SSH keys for password-less access, using public and private keys instead of insecure passwords. And Puppet records all account changes, creating an auditable trail and ensuring internal change management policies are followed.

Puppet Enterprise user account management now makes it easier to:

  • Perform required periodic password changes
  • Provision a new user
  • Grant user access
  • Revoke user access
  • Remove a user from the database
  • Grant limited access to a user, as in giving someone permission to reboot a web server but not permission shut down the machine

Find out more about components included in this release in the Puppet Enterprise FAQ. 

To see PE 1.2 in action register for Introduction to Puppet Enterprise 1.2 Live Webinar this Wednesday, August 31 at 11 am PDT.

Want to try Puppet Enterprise 1.2 for yourself?

Download Puppet Enterprise 1.2 now and start managing 10 nodes for free.