Install the Puppet bridge

The Puppet bridge is the component that connects a Puppet installation to capabilities available through the Perforce Unified Compliance platform. The Perforce Unified Compliance platform maintains an SSE (Server-Sent Events) stream through which it dispatches commands (such as node fact queries) to the Puppet bridge. The Puppet bridge forwards these commands to Puppet, then submits the results back to the Perforce Unified Compliance platform over HTTPS using mTLS (mutual TLS). This pairing allows the Perforce Unified Compliance platform to access Puppet data without requiring inbound network access to the customer's infrastructure.

The Puppet bridge is comprised of the following components:

• A small service that connects to the cloud service.

• A small service that connects to Puppet and CLI tool to manage them.

The two local services talk to each other over localhost.

For full details, including system requirements, see Puppet bridge reference information.

Before you begin

Before you install the Puppet bridge, ensure that you meet the following requirements.

Puppet license

To use the Puppet bridge, you must acquire a Puppet license. Contact your  administrator or Contact our sales team to acquire a license and enable this feature.

Bridge host

For each Puppet instance that you connect, you will install the Puppet bridge on a host in your environment that meets the following requirements:

• Can communicate with PuppetDB in your Puppet environment.

• Can make outbound HTTPS connections to the Perforce Unified Compliance platform public endpoint.

The host can be either:

• A Puppet infrastructure node with outbound internet access.

• A separate bastion or utility node for restricted or air‑gapped environments.

Network connectivity

Ensure the following network paths are available:

• Internal connectivity: Bridge host to PuppetDB.

• External connectivity: Bridge host to the Perforce Unified Compliance platform over outbound HTTPS.

See Puppet bridge reference information for port details.

If your cloud VMs require private routing to reach the Puppet primary server after enrollment, you might also need a VPN or private link, depending on your network design.

Install the Puppet bridge

Obtain the Puppet bridge.

• If you have installed or upgraded to Puppet Enterprise 2025.9 or later, the Puppet bridge package is included in the tarball and is bundled alongside other Puppet packages.

• To use the Puppet bridge with an earlier version of Puppet Enterprise, download the package for your platform from one of the following locations:

  • For YUM-based systems (.rpm):
    https://yum-puppetcore.puppet.com/public/pe-bridge/index.html
    

  • For APT-based systems (.deb):
    https://apt-puppetcore.puppet.com/public/pe-bridge/index.html
    

The Puppet bridge is provided as a system-native package for all supported primary operating systems. Install the package using your system’s native package manager.

Next steps

• If you do not yet have a Puppet user token, you must acquire one before connecting a Puppet instance to the Perforce Unified Compliance platform. See Obtain a Puppet user token.

• If you have a Puppet user token, you can begin or continue the steps to connect a Puppet instance to the Perforce Unified Compliance platform. When you register the instance using the token, the Perforce Unified Compliance platform generates a configuration file that is used to initialize the bridge. See Connect a Puppet instance.