It looks like our puppet hiera expects certificate_name and hostname to be the same. This is a problem, as the puppet master uses a different (and deprecated TLD) from our hiera values. Find a way to work around this so we can finish T299797 .