diff --git a/metropolis/node/core/curator/impl_leader_certificates.go b/metropolis/node/core/curator/impl_leader_certificates.go
index f42b4a4..cb11b99 100644
--- a/metropolis/node/core/curator/impl_leader_certificates.go
+++ b/metropolis/node/core/curator/impl_leader_certificates.go
@@ -27,6 +27,9 @@
 	}
 
 	kubeletServer, kubeletClient, err := kp.Kubelet(ctx, nodeID, req.KubeletPubkey)
+	if err != nil {
+		return nil, status.Errorf(codes.Unavailable, "could not generate kubelet certificates: %v", err)
+	}
 
 	kubeletServerCert, err := kubeletServer.Ensure(ctx, kp.KV)
 	if err != nil {