how to protect my cluster from a removed node

[Spiros Pap]

Hi all,

I did a "pvecm delnode hp4" and removed a node from the cluster. Everything looks fine. The only problem i got, is that i don't contol the removed node....
So if someone boots the node, it will come back online and as the documents state:
"it is critical to power off the node before removal, and make sure that it will never power on again (in the existing cluster network) as it is. If you power on the node as it is, your cluster will be screwed up and it could be difficult to restore a clean cluster state."

So, I can't guarantee that the node will not power up again as it is. How can i neutralize the removed node, by altering my cluster?

Thanx,
Sp

 

[aaron]

You can remove the node from the "/root/.ssh/authorized_keys file (aka /etc/pve/priv/authorized_keys).
Additionally, you could create firewall rules to block any traffic on the corosync, ssh and 8006 ports from that node.

See https://pve.proxmox.com/pve-docs/chapter-pve-firewall.html#pve_firewall_default_rules for a list of default firewall rules needed by a PVE cluster.