Hi,
thanks for the many details. I’ve taken the liberty to edit your posts and enclose all configuration and log blocks with 3 backticks to enhance readability (otherwise I could not read and reply fast enough). Please keep this in mind for future posts of yours, a guide for Markdown formatting can be found here.
Reading the node wizard output, you’re using the on-demand signing method and as such, you’ll need to sign the certificate request on your master node, what’s the output of icinga2 ca list - e.g. did you already sign the request? The logs from your client tell a different story, it always updates the request but does not receive any.
Read more about this specific signing method here.
Cheers,
Michael