pve_node_cert_upload
Upload a custom TLS certificate to a Proxmox VE node. To avoid lockout, use dry-run mode before confirming.
Instructions
MUTATION: upload a custom TLS certificate to a PVE node.
RISK_HIGH, NO UNDO. A malformed cert/key can lock you out of the PVE web UI and API. restart=True reloads pveproxy after upload (brief service interruption). To view the node's currently configured certs use pve_node_certificates.
PRIVATE KEY REDACTION: the 'key' param is a TLS private key (secret). It is UNCONDITIONALLY redacted — it NEVER appears in the plan, change, current state, detail, or ledger (regardless of redact_ledger setting). Only {"key": "[redacted]"} is recorded. The cert body (certificates) is public and may appear in plans/logs.
Revert: re-upload a correct cert, or use pve_node_cert_delete to revert to self-signed. Dry-run by default (returns a PLAN); confirm=True executes (POST, Smoke-confirm) and returns {"status": "ok", "result": <dict | None>}.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| key | No | PEM-encoded TLS private key matching the certificate; a secret, unconditionally redacted in all output. | |
| node | No | PVE node name to upload the certificate to; defaults to the configured node if omitted. | |
| force | No | If True, overwrite an existing custom certificate without requiring it be replaced explicitly. | |
| confirm | No | False (default) returns a dry-run PLAN only; True executes the certificate upload. | |
| restart | No | If True, reload pveproxy after upload to apply the new certificate immediately (brief service interruption). | |
| certificates | Yes | PEM-encoded certificate chain (public, may appear in plans/logs). | |
| proximo_target | No | Which configured Proxmox target to run this call against — a target name from your multi-target config (a specific PVE/PBS/PMG/PDM box). Omit to use the single/default target from the environment; the selection applies only to this call. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |