I am personally less than enthusiastic when it comes to puppet-style solutions for their tendency to create configuration drift; running the same command in more than one place expecting the same results is in my view rarely the best solution in terms of maintainability and reliability.