benvin/puppetserver-cert-helpers
main
Install certmanager and sshsignhost on the shared bin volume, expose them at the /usr/local/bin paths Puppet shells out to, and ship their Vault configs so generate() succeeds during catalog compilation.