Michael,
Thanks for the reply. I use Foreman as ENC, and my buildtest boxes are in a host group that applies our basic site-wide puppet classes. I have set them to not be in a hostgroup and thus not have any classes applied, but the same error persists. I'm just not sure of what the error even means at this point.
For a while I struggled with getting Foreman to provision the EL7 systems, I have a thread in that list about my issues. But using virtualbox VMs on my laptop I was able to work through those issues and was able to run puppet successfully on the vboxes I provisioned from the same Centos7 and OL7 source repos and kickstart scripts as I am using on my production foreman server. The provisioning issues for both OSes were related to the libselinux-ruby package, I had downloaded a Centos iso that didn't have the package to use as my source repo, and in OL7 the package is in a different repo (like RHEL i've heard), so I made a patch [1] to kickstart templates Foreman uses so that the repo gets added/enabled before puppet is installed.
In my virtualbox lab, the only puppet classes I was applying were a static files module that populates /root/.ssh/authorized_keys and example42-puppet + dependencies from the Forge. On my Produciton Puppetmaster we're using more of example42's modules but mostly out of git, and some are run off my own forks. The site-wide modules the hostgroup had included the site files, puppet, razorsedge/puppet-vmwaretools, and our nagios agent monitoring wrapper class which is based on example42/puppet-nrpe.
Anyway, all the extras are now excluded and the errors still persist.
[1]
https://github.com/theforeman/community-templates/compare/master...salderma:master