Installing the PE Client Tools Package

A newer version is available; see the version menu above for details.

The Puppet Enterprise client tools package collects a set of command line tools that let you access Puppet Enterprise services from a workstation that may or may not be managed by Puppet. Because you can safely run these tools remotely, you no longer need to SSH into the Puppet master to execute commands. Your permissions to see information and to take action are controlled by PE role-based access control (RBAC). Your activity is logged under your username rather than under root or the pe-puppet user.

The package includes clients for the following services:

  • Puppet Orchestrator: Tools that provide the interface to the Application Orchestration service. These tools include puppet-job and puppet-app.
  • Puppet Access: A client used to authenticate yourself to the PE RBAC token-based authentication service so that you can use other capabilities and APIs.
  • Razor: The client for Razor, the provisioning application for deploying bare metal systems.

Supported Platforms

The PE client tools package can be installed on the following platforms:

Operating system Version(s) Arch
Red Hat Enterprise Linux 6, 7 x86_64
CentOS 6, 7 x86_64
Oracle Linux 6, 7 x86_64
Scientific Linux 6, 7 x86_64
SUSE Linux Enterprise Server 11, 12 x86_64
Ubuntu 12.04, 14.04 x86_64

Installing the PE Client Tools Package

Puppet Master Installation (Default)

The pe-client-tools package is included in the PE installation tarball. When you install PE, it’s automatically installed on the same node as the Puppet master.

Workstation Installation

You can install the pe-client-tools package on any workstation running a supported OS platform.

The pe-client-tools package requires the puppet-agent package. However, the workstation you’re installing on needn’t be managed by Puppet.

To install the pe-client-tools package on a workstation:

  1. Review the prerequisites for timekeeping, name resolution, and firewall configuration in the system configuration requirements.

    Important: Ensure that the following ports are available on the workstation:

    Port 8143: The Orchestrator client uses this port to communicate with the Orchestration services running on the Puppet master.

    Port 4443: Puppet Access uses this port to communicate with the Puppet Access/RBAC service running on the Puppet master.

    Port 8151: The Razor client uses this port to communicate with the Razor server.

  2. Copy the Puppet Enterprise tarball for the appropriate supported OS platform to your workstation.
  3. Unpack the tarball and navigate to the packages/<PLATFORM> directory.
  4. Use your workstation’s package management tools to install the puppet-agent and pe-client-tools. (Package install tools vary from platform to platform.)

    For example, on RHEL platforms, run the following commands:

    a. rpm -Uvh puppet-agent-<VERSION-and-PLATFORM>.rpm

    b. rpm -Uvh pe-client-tools-<VERSION-and-PLATFORM>.rpm

  5. On the workstation, create the following directory: /etc/puppetlabs/puppet/ssl/certs.
  6. On the Puppet master, navigate to /etc/puppetlabs/puppet/ssl/certs/ and copy ca.pem to the directory on the workstation you made in the previous step.
  7. On the workstation, make sure the file permissions are correct by running chmod 444 /etc/puppetlabs/puppet/ssl/certs/ca.pem.
  8. Verify that the checksum of ca.pem on the workstation matches the checksum of the same file on the Puppet master.

Configuring and Using Client Tools

After installing the tools, see the following documentation to configure and start using each client tool. Note that for the Puppet Access and Orchestrator clients, you can create a configuration file for each service on a per user basis. Instructions for creating configuration files are in the corresponding documentation.

↑ Back to top