Past week the certificate in the network testing server expired. So I updated the qtqa/sysadmin repo with a new certificate and waited ~15 minutes but the certificate wasn't updated. I then logged in to the server and tried to run the script manually, yet it still didn't update the certificate, though it printed an error about a missing function.

To work around it I simply replaced the certificate manually, though this is not ideal for a system where the configuration is supposed to be based on what happens in git.

If puppet is responsible for starting services after reboot then this could potentially also explain why certain don't seem to start. The script simply never gets that far.