Hide Forgot
Document URL: N/A Section Number and Name: N/A Describe the issue: If a cluster admin deletes any of the default projects, like `default`, `openshift`, or `openshift-infra` there are repercussions that impact the whole environment. And we do not have any documentation on how to correct these problems. Suggestions for improvement: Talk with engineering to determine the various steps that need to be done to correct the problems created from deleting each default project.
@David, can you please offer some guidance as to what should be included on this topic? If it's easier to meet up for a brain dump session, please let me know. Thanks!
I've never gone through recovery steps before and I don't think they'd remain stable between versions. Jordan: Would expect stability? Do you have suggestions for dealing with unstable directions? I also wouldn't expect auto-recreation for some of these. Any idea if we do that?
Looks like the master creates the namespaces and bindings on startup if they are missing. Content (templates, image streams, registry, router, etc) does not get recreated automatically.
Work in progress: https://github.com/openshift/openshift-docs/pull/1832
@ Jordan, Please review this PR and let me know if any edits are needed: https://github.com/openshift/openshift-docs/pull/1832
Checked with devenv-rhel7_3898, and the restarted openshift should be exit with error "F0405 01:37:48.525307 26396 start_master.go:539] Could not get client for replication controller: Could not get token for openshift-infra/replication-controller" after I delete all projects via `oc delete projects --all`. And the status of openshift-infra project is in "Terminating" status.
@jliggitt The fix for that bug merged, right?
This is now a KB article per discussion with Jordan: https://access.redhat.com/solutions/2260211
Checked with devenv-rhel7_3984, and the infra project can not be deleted now. # oc delete project --all Error from server: namespaces "default" is forbidden: this namespace may not be deleted Error from server: namespaces "openshift" is forbidden: this namespace may not be deleted Error from server: namespaces "openshift-infra" is forbidden: this namespace may not be deleted And checked with: # openshift version openshift v3.2.0.17 kubernetes v1.2.0-36-g4a3f9c5 etcd 2.2.5 # oc delete projects --all Error from server: namespaces "openshift-infra" is forbidden: this namespace may not be deleted Error from server: namespaces "default" is forbidden: this namespace may not be deleted Error from server: namespaces "openshift" is forbidden: this namespace may not be deleted
Solution published: https://access.redhat.com/solutions/2260211