we've got 3 systems we would need to reconfigure to not be LF managed.

• Ingress
• Jenkins prod
• Jenkins sandboxI'm more than happy to provide them with our puppet around this, but unless they're running puppet themselves, that's not going to be very useful ;)Which means they'll have to come up with the following management of the systems:1) Let's Encrypt cert management on the ingress node
  2) How to manage their Jenkins itself. We've got most everything that is manageable via JCasC in a safe / sane manner done so