For FIPs kernel enablement, we'd need to start using puppet 4.8.1 . The reason is that lower versions of puppet fail when installing modules if FIPS is enabled, because of the usage of md5.
puppet 4.8.2 is now available in master RDO Trunk repo i.e. future Pike release.