...
First, take one of your puppetmasters out of the loadbalancers, to ensure that it is not receiving any puppet traffic. This is done by adding `profileprofile::haproxy::register: false` false to the puppetmasters node-file, followed by a puppet-run on the puppetmaster, and the adminlb's.