PE 2023.8.3

Released May 2025

Puppet Enterprise (PE) 2023 is our current PE LTS release stream. The previous LTS, PE 2021.7, is in overlap support until 28th February, 2025.

To access the End-of-Life (EOL) date and other maintenance information for PE 2023.8, see PE 2023.8 End-of-Life (EOL).
For important information about upgrading to 2023, see Upgrading Puppet Enterprise.
If you're on the LTS stream (2021.7), you'll find release notes and other information for that series in the 2021.7 documentation.
Customers on 2019.8.z are encouraged to upgrade to either 2021.7 or 2023.

To access the release notes for the Puppet^® platform, including Puppet agent, Puppet Server, Facter, and PuppetDB, see Platform release notes.

Enhancements

Pruning process added to activity service for old activity data

In PE 2025.3.0 and 2023.8.3, the activity service runs a cleanup process periodically to prune old activity data. When versions 2025.3.0 and 2023.8.3 are installed, the activity service begins to purge entries older than 13 months upon installation. The threshold for data defaults to 13 months and is configurable.

There are three new configuration values in relation to the activity pruning process:

puppet_enterprise::profile::console::activity_purge_interval

This configures the interval between purge operations in milliseconds.

Default: 1800000 (30 minutes).

puppet_enterprise::profile::console::activity_purge_limit

This configures the max number of activity entries each individual purge operation will attempt to delete.

Default: 200,000 (rows).

puppet_enterprise::profile::console::activity_purge_after

This configures the number of days after which data will start to be deleted.

Default: 395 (13 months).

Platform support

Agent platforms added

This release adds support for the Puppet agent on the following operating system platforms:

Amazon Linux 2023 (FIPS)
Microsoft Windows Server 2025

Primary server platforms added

This release adds support for the primary server on the following operating system platforms:

Amazon Linux 2023

Resolved issues

PE no longer creates a symlink that refers to a non-existent executable

In PE 2023.7.0-2023.8.2 and 2025.0.0-2025.2.0, PE agents created a symlink /opt/puppetlabs/bin/hiera that referred to a non-existent executable. PE 2023.8.3 and 2025.3.0 no longer creates this symlink.

The large file footprint created by the host action collector has been fixed

As part of the host-action-collector, individual events are archived to the file system under a year/month/day scenario. For large customers with a large number of files that were large in size, the host-action-collector wrote these files as part of normal operations. Additionally, the host-day files were not cleaned up regularly and/or removed when they weren’t needed anymore. This issue has been fixed in PE 2023.8.3 and 2025.3.0.

When plan_runner_active is set to true, the infra plan no longer throws an error

In PE 2023.6-2023.8.2 and 2025.0.0-2025.2.0, when plan_runner_active was set to true, an error was shown on the command line. This issue has been fixed in 2023.8.3 and 2025.3.0.

RBAC: The default login_minimum_length value (6) no longer prevents reinstating an 'admin' user.

In PE 2023.8.2 and 2025.2.0, the default value for puppet_enterprise::profile::console::login_minimum_length prevented reinstating an ‘admin’ user. This issue has been fixed in 2023.8.3 and 2025.3.0.

In the PE console, the run task review step masks sensitive parameters

In PE 2023.6-2023.8.2 and 2025.0.0-2025.1.0, the run task review step in the PE console did not mask sensitive parameters. This issue has been fixed in 2023.8.3 and 2025.2.0.

It is now possible to set the LDAP ciphers through the intended classifier changes

In PE 2023.6.0-2023.8.2 and 2025.0.0-2025.1.0, it was not possible to set the LDAP ciphers through the intended classifier changes. This issue has been fixed in 2023.8.3 and 2025.2.0.

Breaking pe_repo::base_url in repo handling fixed

When upgrading from PE 2023.8.1 to 2023.8.2, it was not possible to set pe_repo::base_url to an internal mirror and download all additional agents for other operating systems from this mirror. This issue has been fixed in 2023.8.3 and 2025.3.0.

Unable to edit values for non-string parameters in scheduled plans fixed

In 2021.7.8, users were unable to edit values for non-string parameters in scheduled plans. As a result, scheduled plans needed to be deleted and then, re-created. This issue has been fixed in 2023.8.3 and 2025.3.0.

Console environment schema is less restrictive

In previous versions of Puppet Enterprise the Console’s schema for code environments was overly restrictive and in some cases, this resulted in tasks and plans not displaying. This has been fixed in 2025.2.0 and 2023.8.3.

Security fixes

Addressed the following CVEs:

CVE-2025-21587