Hm, that error makes sense given that the users aren't being defined in the yaml. Could you upload the logs of a puppet apply (potentially with the --debug flag) to a pastebin? There should be some sort of output from the provider for the elasticsearch users file, which might help pinpoint what might be failing when it's attempting to write the file.