In my original sample, I provided the 10.20.1.0/24 CIDR block to scan. Puppet Discovery attempted a connection to the entire IP range using my provided credentials and returned all my nodes. You may had noticed that I have one failed node, which is actually my gateway and cannot be logged into using my credentials: