The CERN IT department provides Puppet-powered configuration management services to LHC experiments and to the department itself for more than 26,000 physical and virtual machines in two data centres. This presentation will give an overview of the current deployment (figures and CERN specials), our experience and methodology migrating to Puppet4 and other ongoing projects such as multitenancy support.