Hello, dont know if this the correct place to ask I had a weird issue just now, the puppetserver service tried to change permissions on

/etc/pki/tls/certs/ca-bundle.crt

, since it runs as puppet and this file is owned by root it couldnt do it making the whole puppetserver fail. We managed to get it going again but we aren't sure why puppetserver tries to interact with the file like this? isn't it supposed to be the puppet agent that does these changes, because the puppet agent runs as root? Log output if needed:

08 10:55:07 puppetserver.domain.com puppetserver[2162559]: WARNING: abs already refers to: #'clojure.core/abs in namespace: medley.core, being replaced by: #'medley.core/abs
Jul 08 10:55:14 puppetserver.domain.com puppetserver[2162559]: Execution error (RuntimeError) at RUBY/use (/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/settings.rb:1152).
Jul 08 10:55:14 puppetserver.domain.com puppetserver[2162559]: (RuntimeError) Got 1 failure(s) while initializing: File[/etc/pki/tls/certs/ca-bundle.crt]: change from '0444' to '0644' failed: failed to set mode 0444 on /etc/pki/tls/certs/ca-bundle.crt: Operation not permitted - No message available
Jul 08 10:55:14 puppetserver.domain.com puppetserver[2162559]: Full report at: Jul 08 10:55:14 puppetserver.domain.com puppetserver[2162559]: /tmp/clojure-2428255437966822285.edn
Jul 08 10:55:15 puppetserver.domain.com puppetserver[2162507]: Background process 2162559 exited before start had completed
Jul 08 10:55:15 puppetserver.domain.com systemd[1]: puppetserver.service: Control process exited, code=exited status=1
Jul 08 10:55:15 puppetserver.domain.com systemd[1]: puppetserver.service: Failed with result 'exit-code'. -- The unit puppetserver.service has entered the 'failed' state with result 'exit-code'.
Jul 08 10:55:15 puppetserver.domain.com systemd[1]: Failed to start puppetserver Service. -- Subject: Unit puppetserver.service has failed -- Unit puppetserver.service has failed.
Jul 08 10:55:15 puppetserver.domain.com systemd[1]: puppetserver.service: Service RestartSec=100ms expired, scheduling restart.
Jul 08 10:55:15 puppetserver.domain.com systemd[1]: puppetserver.service: Scheduled restart job, restart counter is at 26. -- Automatic restarting of the unit puppetserver.service has been scheduled, as the result for
Jul 08 10:55:15 puppetserver.domain.com systemd[1]: Stopped puppetserver Service. -- Subject: Unit puppetserver.service has finished shutting down -- Unit puppetserver.service has finished shutting down.
Jul 08 10:55:15 puppetserver.domain.com systemd[1]: Starting puppetserver Service... -- Subject: Unit puppetserver.service has begun start-up -- Unit puppetserver.service has begun starting up.
Jul 08 10:55:17 puppetserver.domain.com puppetserver[2162849]: WARNING: abs already refers to: #'clojure.core/abs in namespace: medley.core, being replaced by: #'medley.core/abs

i got it going again by adding the puppet user to the wheel group and then starting puppetserver again, and running puppet agent again. but would still like some insight as to why this happened in the first place OS: RHEL8.10 Package version: • Puppet7 • Puppetserver7.17