init.pp

file { '/tmp/server.cert':
  ensure => present,
  source => 'puppet:///certs/server.cert',
  mode   => '0400',
  owner  => puppet,
  group  => puppet,
} ->
java_ks { 'puppetca:keystore':
  ensure       => 'latest',
  certificate  => '/tmp/server.cert',
  target       => '/etc/server.jks',
  password     => 'secret',
  trustcacerts => true,
}