Why does pveproxy still think I have a second node?

oester

Active Member
Jan 9, 2021
32
4
28
69
I separated two of my nodes that used to be in a cluster, and it all appeared to go fine, but I still see this error in the log that pveproxy is trying to connect to that node:

Dec 11 10:10:12 pve-unas pveproxy[2497]: '/etc/pve/nodes/pve01/pve-ssl.pem' does not exist!
Dec 11 10:10:39 pve-unas pveproxy[2498]: '/etc/pve/nodes/pve01/pve-ssl.pem' does not exist!
Dec 11 10:10:40 pve-unas pveproxy[2498]: Could not verify remote node certificate 'XXXXXXXXXX' with list of pinned certificates, refreshing cache


That file is indeed gone, removed as part of the cluster separation - what's causing it to try and connect to the old node?
 
Hi,

it looks like the node is not removed.
If you remove a node incorrectly (or only partially), the cluster database may still contain references to it.
And it looks like you have exactly this case, because pveproxy tries to verify certificates for all nodes it believes are part of the cluster.
Check if all the steps were made https://pve.proxmox.com/wiki/Cluster_Manager#_remove_a_cluster_node
If everything done but the issue still occurs, try to restart pveproxy and pvedaemon
Code:
systemctl restart pveproxy pvedaemon
 
Thanks, yes this was the procedure I followed, and I did restart these process, and rebooted as well.