第 7 章 使用 HCP 集群删除 ROSA

流程

1. 运行以下命令，获取集群 ID、特定于集群的 Operator 角色的 Amazon 资源名称(ARN)和 OIDC 供应商的端点 URL：

   $ rosa describe cluster --cluster=<cluster_name>

   输出示例

   Name:                       test_cluster
   Domain Prefix:              test_cluster
   Display Name:               test_cluster
   ID:                         <cluster_id> 1
   External ID:                <external_id>
   Control Plane:              ROSA Service Hosted
   OpenShift Version:          4.17.0
   Channel Group:              stable
   DNS:                        test_cluster.l3cn.p3.openshiftapps.com
   AWS Account:                <AWS_id>
   AWS Billing Account:        <AWS_id>
   API URL:                    https://api.test_cluster.l3cn.p3.openshiftapps.com:443
   Console URL:
   Region:                     us-east-1
   Availability:
    - Control Plane:           MultiAZ
    - Data Plane:              SingleAZ
   
   Nodes:
    - Compute (desired):       2
    - Compute (current):       0
   Network:
    - Type:                    OVNKubernetes
    - Service CIDR:            172.30.0.0/16
    - Machine CIDR:            10.0.0.0/16
    - Pod CIDR:                10.128.0.0/14
    - Host Prefix:             /23
    - Subnets:                 <subnet_ids>
   EC2 Metadata Http Tokens:   optional
   Role (STS) ARN:             arn:aws:iam::<AWS_id>:role/test_cluster-HCP-ROSA-Installer-Role
   Support Role ARN:           arn:aws:iam::<AWS_id>:role/test_cluster-HCP-ROSA-Support-Role
   Instance IAM Roles:
    - Worker:                  arn:aws:iam::<AWS_id>:role/test_cluster-HCP-ROSA-Worker-Role
   Operator IAM Roles: 2
    - arn:aws:iam::<AWS_id>:role/test_cluster-openshift-cloud-network-config-controller-cloud-crede
    - arn:aws:iam::<AWS_id>:role/test_cluster-openshift-image-registry-installer-cloud-credentials
    - arn:aws:iam::<AWS_id>:role/test_cluster-openshift-ingress-operator-cloud-credentials
    - arn:aws:iam::<AWS_id>:role/test_cluster-kube-system-kube-controller-manager
    - arn:aws:iam::<AWS_id>:role/test_cluster-kube-system-capa-controller-manager
    - arn:aws:iam::<AWS_id>:role/test_cluster-kube-system-control-plane-operator
    - arn:aws:iam::<AWS_id>:role/hcpcluster-kube-system-kms-provider
    - arn:aws:iam::<AWS_id>:role/test_cluster-openshift-cluster-csi-drivers-ebs-cloud-credentials
   Managed Policies:           Yes
   State:                      ready
   Private:                    No
   Created:                    Apr 16 2024 20:32:06 UTC
   User Workload Monitoring:   Enabled
   Details Page:               https://console.redhat.com/openshift/details/s/<cluster_id>
   OIDC Endpoint URL:          https://oidc.op1.openshiftapps.com/<cluster_id> (Managed) 3
   Audit Log Forwarding:       Disabled
   External Authentication:    Disabled

   1

   列出集群 ID。

   2

   指定特定于集群 Operator 角色的 ARN。例如，在示例输出中，Machine Config Operator 所需的角色的 ARN 是 arn:aws:iam::<aws_account_id>:role/mycluster-x4q9-openshift-machine-api-aws-cloud-credentials。

   3

   显示特定于集群的 OIDC 供应商的端点 URL。

   重要

   删除集群后，您需要集群 ID 来使用 ROSA CLI 删除特定于集群的 STS 资源。

2. 使用 OpenShift Cluster Manager 或 ROSA CLI (rosa)删除集群：

   • 使用 OpenShift Cluster Manager 删除集群：

     1. 导航到 OpenShift Cluster Manager。
     2. 点击集群 旁边的 Options 菜单并选择 Delete cluster。
     3. 在提示符中输入集群名称并点 Delete。

   • 使用 ROSA CLI 删除集群：

     1. 运行以下命令，将 &lt ;cluster_name > 替换为集群的名称或 ID：

        $ rosa delete cluster --cluster=<cluster_name> --watch

        重要

        在删除 Operator 角色和 OIDC 供应商前，您必须等待集群删除完成。

3. 运行以下命令来删除特定于集群的 Operator IAM 角色：

   $ rosa delete operator-roles --prefix <operator_role_prefix>

4. 运行以下命令来删除 OIDC 供应商：

   $ rosa delete oidc-provider --oidc-config-id <oidc_config_id>