Working on and improving our Puppet environment while following best
practices [0] is currently blocking on our lack of an external node
classifier, or ENC. Adding this item as a priority on our roadmap will
resolve #40358 and help advance #29387

Deploying `hiera-enc` in itself should be fairly straightforward,
however since some nodes are assigned multiple roles, some of those
roles (eg. roles::fde) will have to be converted into profiles instead
and included from the role class. So a small amount of restructuring of
our roles manifests and current hiera data is to be expected.

If I can focus on this I don't expect it should take more than one
week's time (20h) to implement this fully.

[0] https://puppet.com/docs/puppet/7/the_roles_and_profiles_method.html

roadmap/2021.md

@@ -23,6 +23,8 @@ attention. In general, the over-arching goals are therefore:
 
 ## Need to have
 
+ * [ ] improve Puppet code and data structure
+   * [ ] implement an ENC for Puppet ([issue 40358](https://gitlab.torproject.org/tpo/tpa/team/-/issues/40358))
  * [ ] email delivery improvements:
    * [x] handle bounces in CiviCRM ([issue 33037](https://gitlab.torproject.org/tpo/tpa/team/-/issues/33037))
    * [ ] systematically followup on and respond to abuse complaints (https://gitlab.torproject.org/tpo/tpa/team/-/issues/40168)