- scheduled_task (new type; not cron)
- package (MSI)
Support has also been added for running puppet agent and communicating with a remote puppet master. You can also now apply manifests locally with puppet apply. Currently, Puppet does not support running a puppet master on Windows, and the engineers currently have no plans to add that support.
In other news, there was also an important security warning today for puppet users:
We have discovered a security vulnerability (“AltNames Vulnerability”) whereby a malicious attacker can impersonate the Puppet master using credentials from a Puppet agent node. This vulnerability cannot cross Puppet deployments, but it can allow an attacker with elevated privileges on one Puppet-managed node to gain control of any other Puppet-managed node within the same infrastructure.All Puppet Enterprise deployments are vulnerable, and Puppet open source deployments may be, depending upon their site configuration.