> But if you already run everything in docker and really want to get rid of puppet, then why not?

Docker does not replace puppet and they clearly wrote that they developed a System just for that.