Classify the nodes you want to scan
In Puppet Enterprise (PE), classify the nodes you want to scan.
Before you beginMake sure you've installed Comply, the
complymodule, and the CIS assessor file.
complyclass. Classes are the blocks of Puppet code used to configure nodes and assign resources to them. If you are new to Puppet, see Grouping and classifying nodes for more information.
- In the PE console, click Node groups.
- Create a new node group or select an existing node group that you want to scan.
On the Classes tab — in the Add new class field —
- Click Add class.
In your new
complyclass, select the
scanner_sourceParameter.Note: Parameters allow a class to request external data.
Change the default parameter Value to the CIS assessor
file that you previously downloaded. For example:
scanner_sourceparameter now points to the CIS assessor file.Note: If you have not downloaded the CIS assessor file, see Download the assessor file for instructions.
- Click Add to node group, and then commit the changes.
- Run Puppet twice.
What to do nextAdd PE credentials.