Add an icinga check on whether the last puppet agent run was successful
I think we get an email if the puppet application fails, but that's pretty barebones. We should probably turn this into an icinga check.
Migrated from T2567 (view on Phabricator)