Have been getting these for quite a while, decided to investigate just now.
brennen@deploy-1006:~$ sudo run-puppet-agent
Info: Using environment 'production'
Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Loading facts
Info: Caching catalog for deploy-1006.devtools.eqiad1.wikimedia.cloud
Info: Applying configuration version '(57c50ad730) Btullis - Increase the heap for the mapreduce history service on an-master1003'
Error: /Stage[main]/Geoip::Data::Puppet/File[/usr/share/GeoIP]: Failed to generate additional resources using 'eval_generate': Error 500 on SERVER: Server Error: Not authorized to call search on /file_metadata/volatile/GeoIP with {:rest=>"volatile/GeoIP", :recurse=>true, :max_files=>0, :links=>"manage", :checksum_type=>"sha256", :source_permissions=>"ignore"}
Error: /Stage[main]/Geoip::Data::Puppet/File[/usr/share/GeoIP]: Could not evaluate: Could not retrieve file metadata for puppet:///volatile/GeoIP: Error 500 on SERVER: Server Error: Not authorized to call find on /file_metadata/volatile/GeoIP with {:rest=>"volatile/GeoIP", :links=>"manage", :checksum_type=>"sha256", :source_permissions=>"ignore"}At a glance, this doesn't match anything on Portal:Cloud VPS/Admin/Runbooks/Cloud VPS alert Puppet failure on.