When writing a basic RSpec test for puppet (T78342) I ended up with an error not being able to load passwords::mysql::phabricator
The root cause is manifests/role/phabricator.pp which: include passwords::mysql::phabricator
in the global puppet scope. That class is in labs/private.git repo, thus when RSpec loads the manifests it attempts to include it and fails.
The problem is worked around by providing a stub class, but we want to move that include down in the roles scope.