Is this a critical security issue?

• This is not a security issue.

Describe the Bug

When running puppet in masterless mode, where you only run puppet apply on a manifest file, rather than a puppet master and puppet agent, the resulting server does not require certificates because there is no master to communicate with.

When running puppet apply however, there is an false positive warning about the client certificate not existing, when it's not relevant to that execution mode.

Expected Behavior

No warning for a client certificate not existing, when one is not expected to exist.

Steps to Reproduce

Make a minimal test.pp manifest file:

file {
  '/tmp/composer':
    mode   => '0755',
    source => 'https://getcomposer.org/download/2.8.6/composer.phar';
}

Execute:

puppet apply test.pp

Environment

Version: 8.13
Platform: Gentoo Linux

Additional Context

No response

Relevant log output

Notice: Compiled catalog for phenom in environment production in 0.01 seconds
Warning: Private key for 'fqdn' does not exist
Warning: Client certificate for 'fqdn' does not exist
Notice: /Stage[main]/Main/File[/tmp/composer]/ensure: defined content as '{mtime}2025-02-25 12:03:50 UTC'
Notice: Applied catalog in 0.25 seconds