From: Hannes Duerr <h.duerr@proxmox.com>
To: pve-devel@lists.proxmox.com
Subject: [PATCH pve-docs v2 3/3] partially-fix #4670: pvecm: mention authorized key removal in cleanup steps
Date: Wed, 4 Feb 2026 11:53:24 +0100 [thread overview]
Message-ID: <20260204105324.61841-3-h.duerr@proxmox.com> (raw)
In-Reply-To: <20260204105324.61841-1-h.duerr@proxmox.com>
After a node is removed from the cluster, its public key remains stored
in authorised_keys. However, since the node is no longer part of the
cluster, it should no longer have access to the other cluster nodes.
Signed-off-by: Hannes Duerr <h.duerr@proxmox.com>
---
pvecm.adoc | 3 +++
1 file changed, 3 insertions(+)
diff --git a/pvecm.adoc b/pvecm.adoc
index 8024536..18b0467 100644
--- a/pvecm.adoc
+++ b/pvecm.adoc
@@ -445,6 +445,9 @@ safely ignored.
* Existing xref:ha_manager_rules[high availability rules] will still
reference the deleted node, therefore remove the node from any
existing rules
+* The public key of the removed node will still be listed in
+ '/etc/pve/priv/authorized_keys' and should be deleted if it is no
+ longer needed.
.Rejoin the same node again:
--
2.47.3
prev parent reply other threads:[~2026-02-04 10:53 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-02-04 10:53 [PATCH pve-docs v2 1/3] pvecm: restructure "remove a cluster node" section Hannes Duerr
2026-02-04 10:53 ` [PATCH pve-docs v2 2/3] pvecm: mention node removal from ha rules in cleanup steps Hannes Duerr
2026-02-04 10:53 ` Hannes Duerr [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260204105324.61841-3-h.duerr@proxmox.com \
--to=h.duerr@proxmox.com \
--cc=pve-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.