After 60 days, the puppetadmin user account stops working

The default password of the puppetadmin user expires 60 days after the image is created. If you fail to reset the password, the account expires.

To prevent the password from expiring, run chage -E -1 puppetadmin on the primary server.