- prepare certmanager for pki::vault class - allow puppet to read certmanager config
- add certmanager script and config.yaml file - install into pyenv for certmanager - deploy to puppet-masters only