Not sure if that'll work right but one option is you should be able to use
the generate function in the manifest to make an external call within the
puppetmaster to create the encrypted password. The downside is that its
going to execute every time, where it might be less of a performance hit to
cu
Stages would not really help in this situation since manifests would be
evaluated before plugins are synced in this scenario, the pluginsync would
need to be set to true for it to be done before the manifest is compiled.
One way I combated the problem is to use "production" environment as a node
on