* Revert "Pin puppetlabs_spec_helper to 1.1.1"
* Run local CA trust before haproxy deployment
* Add base constraint so gnocchi metricd is tied to core-clone