This is can be done by an admin disabled of Puppet
# puppet agent --disable "Reason why disabled"
To make sure it’s disable, just do a Puppet run;
# puppet agent -t Notice: Skipping run of Puppet configuration client; administratively disabled (Reason: 'Testing some new things'); Use 'puppet agent --enable' to re-enable.
puppet agent --enable