bastion now using puppet