I try to manage as much of my Puppet Infra and that's working very well. puppet service on the compilers/primary is also managed