Set up Comply
To start using Puppet Comply, you must complete the setup process, using both Comply and Puppet Enterprise (PE).
Important: Before you set up Comply, make
sure you have installed Puppet Application Manager and reviewed the Comply and PE
system requirements.
Setting up Comply involves the following steps:
- Deploy and configure Comply
- Install the
comply
module - Download the CIS assessor file
- Classify the nodes you want to scan in Puppet Enterprise (PE)
- Configure Comply to communicate with PE
-
Comply and PE system requirements
Refer to these system requirements to allow your Puppet Comply application to connect to Puppet Enterprise (PE). -
Configure and deploy Comply in an online environment
The Comply installation process creates a Kubernetes cluster and installs the application on that cluster. -
Configure and deploy Comply in an offline environment
Install Puppet Comply in an air-gapped or offline environment where the Comply host server does not have direct access to the internet. -
Install the comply module
Install thecomply
module from Puppet Forge. -
Download the CIS assessor file
Download the CIS assessor file from Comply. -
Classify the nodes you want to scan
In Puppet Enterprise (PE), classify the nodes you want to scan. -
Add PE credentials to Comply
Puppet Comply is an add-on to Puppet Enterprise (PE). To allow Comply to communicate with PE, you must add your PE credentials to Comply. -
Upgrading
New versions of Puppet Comply are released regularly. Upgrading to the current version ensures you are always taking advantage of the latest features, fixes, and improvements. -
Uninstall Comply
Uninstall Comply by deleting the Comply application and purging the Kubernetes cluster.