10.6. 卸载 Zero Trust Workload Identity Manager
Zero Trust Workload Identity Manager 只是一个技术预览功能。技术预览功能不受红帽产品服务等级协议(SLA)支持,且功能可能并不完整。红帽不推荐在生产环境中使用它们。这些技术预览功能可以使用户提早试用新的功能,并有机会在开发阶段提供反馈意见。
有关红帽技术预览功能支持范围的更多信息,请参阅技术预览功能支持范围。
您可以通过卸载 Operator 并删除其相关资源,从 OpenShift Container Platform 中删除 Zero Trust Workload Identity Manager。
10.6.1. 卸载 Zero Trust Workload Identity Manager 复制链接链接已复制到粘贴板!
您可以使用 Web 控制台卸载 Zero Trust Workload Identity Manager。
先决条件
-
您可以使用
cluster-admin
权限访问集群。 - 访问 OpenShift Container Platform web 控制台。
- Zero Trust Workload Identity Manager 已安装。
流程
- 登陆到 OpenShift Container Platform Web 控制台。
卸载 Zero Trust Workload Identity Manager。
-
进入 Operators
Installed Operators。 - 点 Zero Trust Workload Identity Manager 条目旁边的 Options 菜单,然后点 Uninstall Operator。
- 在确认对话框中,点 Uninstall。
-
进入 Operators
卸载 Zero Trust Workload Identity Manager 后,您可以选择从集群中删除其关联的资源。
先决条件
-
您可以使用
cluster-admin
权限访问集群。
流程
运行以下命令卸载操作对象:
运行以下命令来删除
ZeroTrustWorkloadIdentityManager
集群:oc delete ZeroTrustWorkloadIdentityManager cluster
$ oc delete ZeroTrustWorkloadIdentityManager cluster
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除
SpireOIDCDiscoveryProvider
集群:oc delete SpireOIDCDiscoveryProvider cluster
$ oc delete SpireOIDCDiscoveryProvider cluster
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除
SpiffeCSIDriver
集群:oc delete SpiffeCSIDriver cluster
$ oc delete SpiffeCSIDriver cluster
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除
SpireAgent
集群:oc delete SpireAgent cluster
$ oc delete SpireAgent cluster
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除
SpireServer
集群:oc delete SpireServer cluster
$ oc delete SpireServer cluster
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除持久性卷声明(PVC):
oc delete pvc -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
$ oc delete pvc -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除 CSI 驱动程序:
oc delete csidriver -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
$ oc delete csidriver -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除服务:
oc delete service -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
$ oc delete service -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除命名空间:
oc delete ns zero-trust-workload-identity-manager
$ oc delete ns zero-trust-workload-identity-manager
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除集群角色绑定:
oc delete clusterrolebinding -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
$ oc delete clusterrolebinding -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除集群角色:
oc delete clusterrole -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
$ oc delete clusterrole -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除准入 wehhook 配置:
oc delete validatingwebhookconfigurations -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
$ oc delete validatingwebhookconfigurations -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
运行以下命令来删除自定义资源定义(CRD):
运行以下命令来删除 SPIRE 服务器 CRD:
oc delete crd spireservers.operator.openshift.io
$ oc delete crd spireservers.operator.openshift.io
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除 SPIRE Agent CRD:
oc delete crd spireagents.operator.openshift.io
$ oc delete crd spireagents.operator.openshift.io
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除 SPIFFEE CSI 驱动程序 CRD:
oc delete crd spiffecsidrivers.operator.openshift.io
$ oc delete crd spiffecsidrivers.operator.openshift.io
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除 SPIRE OIDC Discovery Provider CRD:
oc delete crd spireoidcdiscoveryproviders.operator.openshift.io
$ oc delete crd spireoidcdiscoveryproviders.operator.openshift.io
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除 SPIRE 和 SPIFFE 集群联邦信任域 CRD:
oc delete crd clusterfederatedtrustdomains.spire.spiffe.io
$ oc delete crd clusterfederatedtrustdomains.spire.spiffe.io
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除集群 SPIFFE ID CRD:
oc delete crd clusterspiffeids.spire.spiffe.io
$ oc delete crd clusterspiffeids.spire.spiffe.io
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除 SPIRE 和 SPIFFE 集群静态条目 CRD:
oc delete crd clusterstaticentries.spire.spiffe.io
$ oc delete crd clusterstaticentries.spire.spiffe.io
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行以下命令来删除 Zero Trust Workload Identity Manager CRD:
oc delete crd zerotrustworkloadidentitymanagers.operator.openshift.io
$ oc delete crd zerotrustworkloadidentitymanagers.operator.openshift.io
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
验证
要验证资源已被删除,请将每个 oc delete
命令替换为 oc get
,然后运行命令。如果没有返回资源,则成功删除。