In puppet-certs master the default values are loaded via params.pp to workaround kafo limitations. This configures kafo to actually find it. Otherwise it can't load the defaults and the values are nil.
Related issues
Bug #27847: foreman-proxy-certs-generate uses a value for --foreman-proxy-cname to add a DNS record even if it is invalid
Added by Ewoud Kohl van Wijngaarden over 4 years ago
Refs #27847 - Set parameter mapping
In puppet-certs master the default values are loaded via params.pp to
workaround kafo limitations. This configures kafo to actually find it.
Otherwise it can't load the defaults and the values are nil.