Some components of Puppet Enterprise (PE) are set to automatically collect data about how you use PE. Below, you can find the specific information that’s collected. If you want to opt out of providing this data, you can do so either as part of an initial PE installation, or for existing installs.
Puppet Enterprise collects the following data when Puppet Server starts or restarts, and every 24 hours thereafter:
- License UUID
- Number of licensed nodes
- Product name
- PE version
- Master operating system
- Master’s public IP address
- Number of nodes in deployment
In addition to the above, PE collects:
- Agent operating system(s)
- Number of agents running each operating system
- Puppet agent version(s)
- Number of agents running each version of Puppet agent
While in use, the console collects:
- Link and button clicks
- Page load time
- User language
- Screen resolution
- Viewport size
- Anonymized IP address
The PE console does not collect:
- User inputs such as node or group names, user names, rules, parameters, or variables
The collected data is tied to a unique, anonymized identifier for each Puppet master and your site as a whole. No personally identifiable information is collected, and the data we collect is never used or shared outside Puppet.
How sharing this data benefits you
We can, and have, used the data that companies share with us to quickly and efficiently identify organizations that could be affected by a security issue, alert them to the issue, and provide them with steps to take or fixes to download. In addition, data like this helps us understand how you use the product, which in turn helps us improve the product to meet your needs.
How sharing this data benefits Puppet
The data we collect provides just one of many methods we use for learning about our customers. The more we know, the better we can address your needs. For example, knowing how many nodes you manage helps us develop more realistic product testing. And learning which operating systems are the most and the least used helps us decide where to prioritize new functionality. By collecting data, we begin to understand you better as a customer instead of as a data point.
Opt out during a fresh install of Puppet Enterprise
In order to opt out of Puppet’s data collection during a fresh installation, you must install using the text-mode installation. The text-mode installation uses the pe.conf file to set parameters and values needed for the install.
Follow the instructions for a monolithic text-mode install, or a split text-mode install. At the step that asks you to “select ‘text-mode’ when prompted,” and then begin to edit
pe.conf, set the
puppet_enterprise::send_analytics_datavariable to false, as follows:
Follow the rest of the instructions as described. By running Puppet with this setting, you will be “opted out” of data collection.
If you don’t want to go through the text method to opt out, you can install through the GUI, as described below.
Opt out with an existing PE install
If you’ve already installed PE and want to disable data collection, follow these steps.
- In the PE console, click Classification, and then click PE Infrastructure.
- On the Classes tab, on the
puppet_enterpriseclass, add the parameter,
send_analytics_dataand set the Value to
false. By default, this variable is set to
Run Puppet to enforce the change. To do so, on the Inventory page, click your master node and then click Run Puppet. Do the same for your console node. You can also run the
puppet jobcommand. For example:
$ puppet job run --nodes puppetmaster.domain.com,puppetconsole.domain.com
Either option will enforce the changes required to opt-out of data collection.