In order to deploy a fully automated infrastructure, we are using:
There's no technical reason why puppet and ansible co-exist. That happened naturally due to different people working on different things
Some of those files are encrypted (using either ansible-vault or git-crypt). If you do need access to any of them for any reason, please contact infrastructure team.
Not all machines are yet fully automated (both for terraform and ansible), but we are currently working on that.