Certificate lost during cluster join

[SteveITS]

In Proxmox 8.3.5 it seems if I add a custom secure certificate then join the server to a cluster, the custom certificate is lost/deleted and I need to add it again...? This happened to me a couple of times so I figured I'd post just to check if I'm crazy.

 

[fba]

Have a look at this, first paragraph: https://pve.proxmox.com/wiki/Certificate_Management

 

[SteveITS]

Ah, so the web GUI cert is being overwritten with a default cluster cert? Seems like that's unnecessary if the cluster isn't using that internally...? Or is it?

In our case we're using a wildcard cert but there's not a way to specify to use that at the cluster level that I can see. I suppose that would only make sense with a wildcard or multiple-domain cert anyway.

 

[weehooey-bh]

Ah, so the web GUI cert is being overwritten with a default cluster cert?

Yes, when a node joins a cluster, many parts of its configuration are overwritten -- including the certs.

If you add your custom cert after the node has joined the cluster, life will be fine.