few changes

1. symlink for cosmos-site.pp
2. infra cert class for all the servers

cosmos-site.pp

@@ -0,0 +1 @@
+global/overlay/etc/puppet/manifests/cosmos-site.pp

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -1,6 +1,7 @@
 # Note that the matching is done with re.match()
 .*\.sunet\.se$:
    net:
+   infra_ca_rp:
    sunet::nagios::nrpe:
       checks:
         - nrpe_check_apt

global/overlay/etc/puppet/manifests/cosmos-site.pp

@@ -49,3 +49,8 @@ node default {
 #      proto => "tcp"
 #   }
 #}
+
+# infra ca rp class
+class infra_ca_rp {
+  sunet::ici_ca::rp { 'infra': }
+}