17.2. 使用 Cloud Credential Operator 实用程序删除 Amazon Web Services 资源

先决条件

• 提取并准备 ccoctl 二进制文件。
• 卸载使用短期凭证的 AWS 上的 OpenShift Container Platform 集群。

流程

• 运行以下命令，删除 ccoctl 创建的 AWS 资源：

  $ ccoctl aws delete \
    --name=<name> \1
    --region=<aws_region> 2

  1

  <name> 与最初用于创建和标记云资源的名称匹配。

  2

  <aws_region> 是要删除云资源的 AWS 区域。

  输出示例

  2021/04/08 17:50:41 Identity Provider object .well-known/openid-configuration deleted from the bucket <name>-oidc
  2021/04/08 17:50:42 Identity Provider object keys.json deleted from the bucket <name>-oidc
  2021/04/08 17:50:43 Identity Provider bucket <name>-oidc deleted
  2021/04/08 17:51:05 Policy <name>-openshift-cloud-credential-operator-cloud-credential-o associated with IAM Role <name>-openshift-cloud-credential-operator-cloud-credential-o deleted
  2021/04/08 17:51:05 IAM Role <name>-openshift-cloud-credential-operator-cloud-credential-o deleted
  2021/04/08 17:51:07 Policy <name>-openshift-cluster-csi-drivers-ebs-cloud-credentials associated with IAM Role <name>-openshift-cluster-csi-drivers-ebs-cloud-credentials deleted
  2021/04/08 17:51:07 IAM Role <name>-openshift-cluster-csi-drivers-ebs-cloud-credentials deleted
  2021/04/08 17:51:08 Policy <name>-openshift-image-registry-installer-cloud-credentials associated with IAM Role <name>-openshift-image-registry-installer-cloud-credentials deleted
  2021/04/08 17:51:08 IAM Role <name>-openshift-image-registry-installer-cloud-credentials deleted
  2021/04/08 17:51:09 Policy <name>-openshift-ingress-operator-cloud-credentials associated with IAM Role <name>-openshift-ingress-operator-cloud-credentials deleted
  2021/04/08 17:51:10 IAM Role <name>-openshift-ingress-operator-cloud-credentials deleted
  2021/04/08 17:51:11 Policy <name>-openshift-machine-api-aws-cloud-credentials associated with IAM Role <name>-openshift-machine-api-aws-cloud-credentials deleted
  2021/04/08 17:51:11 IAM Role <name>-openshift-machine-api-aws-cloud-credentials deleted
  2021/04/08 17:51:39 Identity Provider with ARN arn:aws:iam::<aws_account_id>:oidc-provider/<name>-oidc.s3.<aws_region>.amazonaws.com deleted

验证

• 要验证资源是否已删除，请查询 AWS。如需更多信息，请参阅 AWS 文档。