Currently only ONE VM has role::puppet::self applied:
wtui-new.wikidata-topicmaps.eqiad.wmflabs
Not only that, but puppet is broken on that host and has been for quite some time. I've contacted the creator of that VM but I suspect that it is abandoned.
So, with that, we can finally remove the puppet code that supports role::puppet::self, and we should do so before someone accidentally re-applied it someplace.