After a node is removed from the cluster, its public key remains stored
in authorised_keys. However, since the node is no longer part of the
cluster, it should no longer have access to the other cluster nodes.

Signed-off-by: Hannes Duerr <[email protected]>
---
 pvecm.adoc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pvecm.adoc b/pvecm.adoc
index 8024536..18b0467 100644
--- a/pvecm.adoc
+++ b/pvecm.adoc
@@ -445,6 +445,9 @@ safely ignored.
 * Existing xref:ha_manager_rules[high availability rules] will still
   reference the deleted node, therefore remove the node from any
   existing rules
+* The public key of the removed node will still be listed in
+  '/etc/pve/priv/authorized_keys' and should be deleted if it is no
+  longer needed.
 
 .Rejoin the same node again:
 
-- 
2.47.3




Reply via email to