Keys need the keymaster to generate keys before they are deployed. When a key is deployed on the keymaster, this errors and fails can block the generation of keys.
It's better that keymaster notifies issues but does not halt a puppet run
Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Can't read public key /var/lib/keymaster/openssh/puppet_at_puppetmaster/key.pub at /etc/puppet/environments/production/library/keymaster/manifests/openssh/key/deploy.pp:41 on node puppet.local
Keys need the keymaster to generate keys before they are deployed. When a key is deployed on the keymaster, this errors and fails can block the generation of keys.
It's better that keymaster notifies issues but does not halt a puppet run