From emails, it seems puppet has been failing there for a while.
There was a move of puppetmaster, and puppet fails the certificate:
Error: /File[/var/lib/puppet/facts.d]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 peeraddr=172.16.128.120:8140 state=error: certificate verify failed (self-signed certificate in certificate chain): [self-signed certificate in certificate chain for /CN=Puppet CA: puppet]
Will fix
The puppetmaster was changed here:
https://gerrit.wikimedia.org/r/plugins/gitiles/cloud/instance-puppet-dev/+/e3d927442359c7fbed7c47f5c62b6e188efe903e%5E%21/#F0
Mentioned in SAL (#wikimedia-cloud-feed) [2023-12-08T11:58:33Z] <wm-bot2> dcaro@urcuchillay START - Cookbook wmcs.vps.refresh_puppet_certs on etcd-discovery-1.cloudinfra-codfw1dev.codfw1dev.wikimedia.cloud (T353055)
Mentioned in SAL (#wikimedia-cloud-feed) [2023-12-08T12:00:28Z] <wm-bot2> dcaro@urcuchillay END (FAIL) - Cookbook wmcs.vps.refresh_puppet_certs (exit_code=99) on etcd-discovery-1.cloudinfra-codfw1dev.codfw1dev.wikimedia.cloud (T353055)