puppet configuration for UNCA