PuppetConf 2016

Puppet is a great first step to making your environment more secure. Evolving your system setup into infrastructure as code allows a clear audit trail and more inspection of your current state, allowing you to shine a light on any problem areas in your estate. But how do we make sure our Puppet setup doesn't make things less secure whilst making it easier to automate? We're going to talk about: * Making sure security is part of your workflow, rather than an afterthought. * Best practise with hardening your Puppet architecture. * Secrets management with the Puppet toolchain. * Keeping your code clear of plaintext passwords.