- move puppetdb profiles to profiles::puppetdb namespace - add profile to manage puppetdb api ssl certificates
- wait for the enc_role fact to be updated and match - move puppetdb db/api host values to common.yaml - add vault cert altnames for consul query/service addresses - add consul services/rules/checks
- start creation on apps:: roles - reorganise hieradata to match role changes - remove tagging for enc repo