External puppet server unable to push facts with nodes.rb

Support
1

What am I doing wrong here?
Can I somehow disable SSL verification of the puppet server when it reports facts - if that is the problem here?

Problem:
On (external) puppet server:

sudo -u puppet /etc/puppetlabs/puppet/nodes.rb --push-only-current-client-facts
Error retrieving node --push-only-current-client-facts: Net::HTTPNotFound
Check Foreman's /var/log/foreman/production.log for more information.

In production.log on foreman:

2021-12-27T11:20:30 [I|app|b8569598] Started GET "/node/--push-only-current-client-facts?format=yml" for 192.168.248.50 at 2021-12-27 11:20:30 +0100
2021-12-27T11:20:30 [I|app|b8569598] Processing by HostsController#externalNodes as YML
2021-12-27T11:20:30 [I|app|b8569598]   Parameters: {"name"=>"--push-only-current-client-facts"}
2021-12-27T11:20:30 [W|app|b8569598] No SSL cert supplied, falling back to reverse DNS for hostname lookup - request from 192.168.248.50
2021-12-27T11:20:30 [W|app|b8569598] No SSL cert supplied, falling back to reverse DNS for hostname lookup - request from 192.168.248.50
2021-12-27T11:20:30 [I|app|b8569598] Completed 404 Not Found in 30ms (ActiveRecord: 5.0ms | Allocations: 4006)

Foreman and Proxy versions:
Foreman 3.1
Foreman and Proxy plugin versions:

Distribution and version:
RHEL 7.9
Other relevant data:
puppetserver version: 6.7.0

2

Or - is this related to the client SSL certificate? Since some older hosts seem to continue to report in facts…

3

Hmm, I can push facts to all nodes individually but not for all using only the --push-facts option without any client name (certname).

I don’t understand - what’s the difference in using only --push-facts without client name and a for-loop that goes through all clients and pushes them one-by-one?