Following prod: {T184562}
Already started this by spinning up deployment-puppetmaster03.deployment-prep.eqiad.wmflabs
[] deployment-apertium02
[*] deployment-aqs01
[*] deployment-aqs02
[*] deployment-aqs03
[*] deployment-cache-text04
[*] deployment-cache-upload04
[] deployment-cassandra3-01
[] deployment-cassandra3-02
[*] deployment-certcentral
[*] deployment-certcentral-testclient
[] deployment-changeprop
[] deployment-chromium01
[*] deployment-conf03
[] deployment-cpjobqueue
[*] deployment-cumin
[*] deployment-db03
[*] deployment-db04
[] deployment-deploy1001 - puppet errors
[] deployment-dumps-puppetmaster (despite this being a puppetmaster, it is not using itself)
[] deployment-elastic05
[] deployment-elastic06
[] deployment-elastic07
[*] deployment-etcd-01
[] deployment-eventlog05
[*] deployment-fluorine02
[*] deployment-imagescaler01
[*] deployment-imagescaler02
[*] deployment-ircd
[*] deployment-jobrunner03
[*] deployment-kafka-jumbo-1
[*] deployment-kafka-jumbo-2
[*] deployment-kafka-main-1
[*] deployment-kafka-main-2
[] deployment-logstash2
[] deployment-maps03
[] deployment-mathoid
[] deployment-mcs01
[*] deployment-mediawiki-07
[*] deployment-mediawiki-09
[*] deployment-mediawiki06
[*] deployment-memc04
[*] deployment-memc05
[*] deployment-memc06
[*] deployment-memc07
[*] deployment-mira
[] deployment-ms-be03 - puppet errors
[] deployment-ms-be04 - puppet errors
[*] deployment-ms-fe02
[] deployment-mx - puppet errors
[] deployment-mx02 - puppet errors
[] deployment-ores01
[] deployment-parsoid09
[] deployment-pdfrender02
[*] deployment-poolcounter04
[] deployment-prometheus01
[*] deployment-puppetdb01
[*] deployment-puppetdb02
[] ~~deployment-puppetmaster02~~ (probably no point pointing the agent from this to 03)
[*] deployment-puppetmaster03
[] deployment-redis01 - puppet errors
[] deployment-redis02 - puppet errors
[*] deployment-redis05
[*] deployment-redis06
[] deployment-restbase01
[] deployment-restbase02
[] deployment-sca01
[] deployment-sca02
[] deployment-sca04
[] deployment-sentry01
[] ~~deployment-snapshot01~~ - special case as this uses deployment-dumps-puppetmaster, am going to need to talk to @ArielGlenn about that
[*] deployment-tin
[*] deployment-urldownloader
[] deployment-webperf01
[] deployment-zookeeper02
[] deployment-zotero01
```lang=bash,name=Process
sudo -i
puppet agent -tv
# make hieradata change in horizon: puppetmaster: deployment-puppetmaster03.deployment-prep.eqiad.wmflabs
puppet agent -tv
cd /var/lib/puppet; mv ssl ssl_old; rm /usr/local/share/ca-certificates/Puppet_Internal_CA.crt; sudo nano /usr/local/share/ca-certificates/Puppet_Internal_CA.crt
# copy in cert from another host already using deployment-puppetmaster03
update-ca-certificates --fresh
puppet agent -tv
# sign cert on deployment-puppetmaster03: puppet cert sign deployment-?.deployment-prep.eqiad.wmflabs
puppet agent -tv
puppet agent -tv```