As an interim step to https://phabricator.wikimedia.org/T331699 I'll upgrade the existing LDAP r/w servers (serpens/seaborgium) to Bullseye.
This untangles this bigger migration from the Puppet 7/buster migrations and allows us to tackle some further prep work (such as moving the replicas to private IPs