Puppet

Foreman writes the autosign entry but the CSR sits pending forever, because permissions on the CA serial file reject the PUT.

Managing Dell iDRAC settings from Puppet with racadm, guarded by an onlyif so it only runs on Dell hardware.

Puppet exec resources that generate a Bacula client key and self-signed certificate, then concatenate them into the PEM the file daemon wants.