Changed the user/group definitions to be just "tomcat" for both user and group instead of apache-tomcat (user) and www-data (group).  This makes it play much nicer with the apache puppet module.