The following nodes are listed in icinga:
conf2002.codfw.wmnet conf2003.codfw.wmnet kraz.wikimedia.org
Given https://wikitech.wikimedia.org/wiki/Puppet#Renew_agent_certificate, I'd say that we should just run the cookbook for all three. irc.wikimedia.org points to irc2001 now so I think it is fine to proceed!