Following prod: {T184562}
Already started this by spinning up deployment-puppetmaster03.deployment-prep.eqiad.wmflabs
[*] deployment-apertium02
[*] deployment-aqs01
[*] deployment-aqs02
[*] deployment-aqs03
[*] deployment-cache-text04
[*] deployment-cache-upload04
[*] deployment-cassandra3-01
[*] deployment-cassandra3-02
[*] deployment-certcentral
[*] deployment-certcentral-testclient
[*] deployment-changeprop
[*] deployment-chromium01
[*] deployment-conf03
[*] deployment-cpjobqueue
[*] deployment-cumin
[*] deployment-db03
[*] deployment-db04
[*] deployment-deploy1001 - puppet errors - T192561 - temporarily commented broken resource for migration
[*] deployment-dumps-puppetmaster (despite this being a puppetmaster, it is not using itself)
[*] deployment-elastic05
[*] deployment-elastic06
[*] deployment-elastic07
[*] deployment-etcd-01
[] deployment-eventlog05 - puppet errors - T191109
[*] deployment-fluorine02
[*] deployment-imagescaler01
[*] deployment-imagescaler02
[*] deployment-ircd
[*] deployment-jobrunner03
[*] deployment-kafka-jumbo-1
[*] deployment-kafka-jumbo-2
[*] deployment-kafka-main-1
[*] deployment-kafka-main-2
[*] deployment-logstash2
[*] deployment-maps03
[*] deployment-mathoid
[*] deployment-mcs01
[*] deployment-mediawiki-07
[*] deployment-mediawiki-09
[*] deployment-mediawiki06
[*] deployment-memc04
[*] deployment-memc05
[*] deployment-memc06
[*] deployment-memc07
[*] deployment-mira
[*] deployment-ms-be03 - puppet errors - T184236 - cherry-picked patch
[*] deployment-ms-be04 - puppet errors - T184236 - cherry-picked patch
[*] deployment-ms-fe02
[] deployment-mx - puppet errors - T184244
[] deployment-mx02 - puppet errors - related work at T184244, specific error untracked
[*] deployment-ores01
[*] deployment-parsoid09
[*] deployment-pdfrender02
[*] deployment-poolcounter04
[*] deployment-prometheus01
[*] deployment-puppetdb01
[*] deployment-puppetdb02
[] ~~deployment-puppetmaster02~~ (probably no point pointing the agent from this to 03)
[*] deployment-puppetmaster03
[] deployment-redis01 - puppet errors - T179371#3872776
[] deployment-redis02 - puppet errors - T179371#3872776
[*] deployment-redis05
[*] deployment-redis06
[*] deployment-restbase01
[*] deployment-restbase02
[*] deployment-sca01
[*] deployment-sca02
[*] deployment-sca04
[*] deployment-sentry01
[] ~~deployment-snapshot01~~ - special case as this uses deployment-dumps-puppetmaster, am going to need to talk to @ArielGlenn about that
[*] deployment-tin
[*] deployment-urldownloader
[*] deployment-webperf01 - was never set up on old puppetmaster anyway
[*] deployment-zookeeper02
[*] deployment-zotero01
```lang=bash,name=Process
sudo -i
puppet agent -tv
# make hieradata change in horizon: puppetmaster: deployment-puppetmaster03.deployment-prep.eqiad.wmflabs
puppet agent -tv
cd /var/lib/puppet; mv ssl ssl_old; rm /usr/local/share/ca-certificates/Puppet_Internal_CA.crt; sudo nano /usr/local/share/ca-certificates/Puppet_Internal_CA.crt
# copy in cert from another host already using deployment-puppetmaster03
update-ca-certificates --fresh
puppet agent -tv
# sign cert on deployment-puppetmaster03: puppet cert sign deployment-?.deployment-prep.eqiad.wmflabs
puppet agent -tv
puppet agent -tv```