Right, when you know you have a degraded cluster - any little blip is potentially a second and fatal failure. You either let the HA system do its job, which sounds like it performed as expected, or take over recovery by disabling HA.Disarming HA should have probably been our first step.
Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox