删除K8s Namespace时卡在Terminating状态

╰+哭是因爲堅強的太久メ 2024-04-17 05:41 87阅读 0赞

想要删除K8s里的一个Namespace，结果删除了所有该Namespace资源之后使用`kubectl delete namespace test`发现删除不掉，一直卡在`Terminating`状态，使用`--force`参数依然无法删除，报错:  
`Error from server (Conflict): Operation cannot be fulfilled on namespaces "test": The system is ensuring all content is removed from this namespace. Upon completion, this namespace will automatically be purged by the system.`  
找了一圈，发现[这个Issue][Issue]，里面[有条评论][Link 1]

> kubectl get namespace annoying-namespace-to-delete -o json > tmp.json  
> then edit tmp.json and remove”kubernetes”
> 
> curl -k -H “Content-Type: application/json” -X PUT –data-binary @tmp.json [https://kubernetes-cluster-ip/api/v1/namespaces/annoying-namespace-to-delete/finalize][https_kubernetes-cluster-ip_api_v1_namespaces_annoying-namespace-to-delete_finalize]
> 
> and it should delete your namespace,

跟着试了一下，很管用，直接就删除了：  
先运行`kubectl get namespace test -o json > tmp.json`，拿到当前namespace描述，然后打开`tmp.json`，删除其中的`spec`字段。因为这边的K8s集群是带认证的，所以又新开了窗口运行`kubectl proxy`跑一个API代理在本地的8081端口。最后运行`curl -k -H "Content-Type: application/json" -X PUT --data-binary @tmp.json http://127.0.0.1:8001/api/v1/namespaces/test/finalize`

搞定！

[Issue]: https://github.com/kubernetes/kubernetes/issues/19317
[Link 1]: https://github.com/kubernetes/kubernetes/issues/19317#issuecomment-457745457
[https_kubernetes-cluster-ip_api_v1_namespaces_annoying-namespace-to-delete_finalize]: https://kubernetes-cluster-ip/api/v1/namespaces/annoying-namespace-to-delete/finalize