csr_attributes.tpl

---
extension_requests:
  pp_preshared_key: "${psk}"

metadata.tpl

{
  "network": "${base64encode_file(templates/network.tpl)}",
  "network.encoding": "base64",
  "local-hostname": "${hostname}"
}

network.tpl

version: 1
config:
  - type: physical
    name: ens192
    subnets:
      - type: static
        address: ${address}
        netmask: 255.255.255.0
        gateway: ${gateway}
        dns_nameservers:
          - 10.0.110.30
          - 10.60.10.30
        dns_search:
          - mydomain.fi

userdata.tpl

#cloud-config
write_files:
- encoding: b64
  content: ${base64encode("role=${role}\n")}
  path: /etc/puppetlabs/facter/facts.d/role.txt
- encoding: b64
  content: ${base64encode_file(templates/csr_attributes.tpl)}
  path: /etc/puppetlabs/puppet/csr_attributes.yaml

runcmd:
- [ '/bin/systemctl', 'start', 'puppet' ]

users:
- name: test
  ssh_authorized_keys:
  - ssh-rsa MAj1oT46xLncyEhlqjoAPqMg... user@otherhost
  groups: wheel

vm_config

guestinfo.metadata = "${base64encode_file(templates/metadata.tpl)}"
guestinfo.metadata.encoding = "base64"
guestinfo.userdata = "${base64encode_file(templates/userdata.tpl)}"
guestinfo.userdata.encoding = "base64"