Puppet expecting to have the following name for the host (it getting it from DNS):
You pushing it to use different name:
HMC nodename: hmc-cluster.localdns.com
So, puppet confused and it's certificates are not good.
You should use the name which pushed by DNS, not invent your own name for the host.