address integration test failures

Author: LukasAud

.github/workflows/integration_test.yml

@@ -322,6 +322,35 @@ jobs:
             echo "      Ensure .fixtures.yml includes stdlib and that \"bundle exec rake spec_prep\" ran."
           fi
 
+      - name: Verify puppet CLI on all test targets (required)
+        env: { BOLT_GEM: "1" }
+        shell: bash
+        run: |
+          set -Eeuo pipefail
+          set -o pipefail
+
+          MASTER='${{ steps.pe-master.outputs.master_uri }}'
+          MASTER=${MASTER//\"/}; MASTER=${MASTER//\'/}
+
+          ALL="$(ruby -ryaml -e '
+            inv = YAML.load_file("spec/fixtures/litmus_inventory.yaml")
+            puts inv.fetch("groups",[]).flat_map{|g| g.fetch("targets",[]) }.map{|t| t["uri"]}.join(",")
+          ')"
+          [[ -n "$ALL" ]] || { echo "No targets found in inventory"; exit 3; }
+
+          bundle exec bolt command run "/bin/bash -lc '
+            set -Eeuo pipefail
+            if command -v puppet >/dev/null 2>&1 || [ -x /opt/puppetlabs/bin/puppet ]; then
+              exit 0
+            fi
+            echo \"Attempting to install puppet-agent from https://${MASTER}:8140...\" >&2
+            if curl -fsSLk https://${MASTER}:8140/packages/current/install.bash | bash; then
+              exit 0
+            fi
+            echo \"ERROR: puppet CLI still missing after install attempt\" >&2
+            exit 1
+          '" -i spec/fixtures/litmus_inventory.yaml --targets "$ALL" --run-as root
+
       - name: Run integration tests
         run: |
           bundle exec rake ntp:integration