So based on a git grep -E "^#\!/usr/bin/(env )?python([^3]|$)" in puppet.git I filtered through for stuff that looked Cloud VPS-related. It might be incomplete.
Ideally this stuff would be done this year.
modules/openstack/files/designate/designatemakedomain.py:#!/usr/bin/python modules/openstack/files/monitor/fullstack/check_nova_fullstack_leaks.py:#!/usr/bin/python modules/openstack/files/ussuri/admin_scripts/wmcs-cold-migrate.py:#!/usr/bin/python modules/openstack/files/ussuri/admin_scripts/wmcs-cold-nova-migrate.py:#!/usr/bin/python modules/openstack/files/ussuri/admin_scripts/wmcs-live-migrate.py:#!/usr/bin/python modules/openstack/files/ussuri/admin_scripts/wmcs-logstat.py:#!/usr/bin/env python modules/openstack/files/ussuri/admin_scripts/wmcs-makedomain.py:#!/usr/bin/python modules/openstack/files/ussuri/admin_scripts/wmcs-region-migrate-security-groups.py:#!/usr/bin/python modules/openstack/files/ussuri/admin_scripts/wmcs-region-migrate.py:#!/usr/bin/python modules/openstack/files/ussuri/admin_scripts/wmcs-wikitech-grep.py:#!/usr/bin/env python modules/openstack/files/victoria/admin_scripts/wmcs-cold-migrate.py:#!/usr/bin/python modules/openstack/files/victoria/admin_scripts/wmcs-cold-nova-migrate.py:#!/usr/bin/python modules/openstack/files/victoria/admin_scripts/wmcs-live-migrate.py:#!/usr/bin/python modules/openstack/files/victoria/admin_scripts/wmcs-logstat.py:#!/usr/bin/env python modules/openstack/files/victoria/admin_scripts/wmcs-makedomain.py:#!/usr/bin/python modules/openstack/files/victoria/admin_scripts/wmcs-region-migrate-security-groups.py:#!/usr/bin/python modules/openstack/files/victoria/admin_scripts/wmcs-region-migrate.py:#!/usr/bin/python modules/openstack/files/victoria/admin_scripts/wmcs-wikitech-grep.py:#!/usr/bin/env python modules/profile/files/toolforge/proxylistener.py:#!/usr/bin/env python