- create instance
- add role::puppetmaster::pontoon to horizon
- run-puppet-agent (x2)
- sudo puppet cert generate $(hostname -f)
```
Warning: `puppet cert` is deprecated and will be removed in a future release.
   (location: /usr/lib/ruby/vendor_ruby/puppet/application.rb:370:in `run')
Error: A Certificate already exists for af-kormat-pm.automation-framework.eqiad.wmflabs
```