{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreihni5wxbnh3btyiijreeha2qbxsegyh2g3sdrqvemqeg64uvqo4fq",
    "uri": "at://did:plc:25rdn5elo5izoxrmtis34zuk/app.bsky.feed.post/3mpofns4vsr72"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreidawvw4izg4kgcssqzvim5le4bx4d7jlqokg6hcmsx6ehzjqufoke"
    },
    "mimeType": "image/webp",
    "size": 160714
  },
  "path": "/puppet/puppet-enterprise-introduces-database-backed-ca-storage-in-202511-release-epl",
  "publishedAt": "2026-07-02T15:32:28.000Z",
  "site": "https://dev.to",
  "tags": [
    "puppet",
    "devops",
    "PE 2025.11 release notes",
    "release notes",
    "PE 2025.11 Release Notes",
    "PE 2023.8.10 Release Notes",
    "Download Puppet Enterprise"
  ],
  "textContent": "The latest Puppet Enterprise releases are out and this one has a huge load of improvements, fixes, and security patches included!\n\n##  Puppet Enterprise (PE) 2025.11 released!\n\nThe full PE 2025.11 release notes are always the best way to get a full detail on what has changed, but here are some highlights of PE 2025.11!\n\n###  Certificate Authority (CA): Database-backed Storage\n\nThis new optional feature adds support for storing CA data in a PostgreSQL database instead of the file system. This improves performance and reliability and introduces API-driven capabilities and enhanced backup and recovery handling.\n\n###  PostgreSQL 17 Supported\n\nPE-managed installations will automatically upgrade from verson 14 to 17 as part of the upgrade process, or you can update yourself before upgrading to PE 2025.11\n\n###  Infra Assistant Goes GPT-5\n\nGPT-5 series models are now running under the hood of Infra Assistant, improving the quality of responses and the consistency for queries.\n\n###  Advanced Patching Enhancements\n\nThe advanced patching feature now has improvements across a variety of areas\n\n  * New `puppet_run_concurrency` setting allows you to get better performance out of patch group enrollment\n  * Improved validation of scheduled and immediate jobs to reduce risk of unintended or skipped executions.\n  * Cron scheduling has better user experience and improved validation across features.\n  * New configurable option to enable Puppet to run after patch jobs to refresh `pe_patch` facts\n\n\n\n###  New Endpoints for Classifier and Activity Service APIs\n\nThe Classifier API introduced new `tags`, `add-tags` and `remove-tags` endpoints to manage node group tags. The Activity service API now has `subscriptions` endpoints to create subscriptions, list subscriptions, or fetch/delete a specific subscription.\n\n###  Agent Platform Updates, Resolved Issues, and Security Fixes\n\nThe macOS 26 platform is now supported for both ARM and x86_64, while support has been removed for Ubuntu 18.04 and Ubuntu 20.04.\n\nNearly 60 CVEs were addressed in this release, along with many resolved issues. You should definitely check out the release notes for the full list of fixes!\n\n##  PE 2023.8.10 Released\n\nAlong with the new 2025.11 release, the latest patches for the LTS version PE 2023.8 has also been put out.\n\n  * **Agent platforms** were a big change, as macOS 26 was added, along with removing support for Ubuntu 18 and Ubuntu 20.\n  * **Nearly 60 CVEs resolved** in this release, many by component updates.\n  * Some additional fixes made in 2025.11 have also been inherited for the Activity service API and LDAP group attributes handling.\n\n\n\n##  Official Release Notes\n\nRead more in the full release notes on help.puppet.com ⬇️\n\n  * PE 2025.11 Release Notes\n  * PE 2023.8.10 Release Notes\n\n\n\nDownload Puppet Enterprise",
  "title": "Puppet Enterprise Introduces Database-Backed CA Storage in 2025.11 release"
}