Q0dZddlmZddlmZddlmZddlZddlmZddl m Z ddl m Z dd lmZdd lmZdd lmZdd lmZdd lmZddlm ZddlmZddlmZddlmZddlmZddlmZGdde j:Zy)zDThe unregister-cluster command for removing clusters from the fleet.)absolute_import)division)unicode_literalsN) exceptions)util)base) agent_util)api_util)exclusivity_util) kube_util) resources)gke_util) arg_utils)log) console_ioc,eZdZdZedZdZdZy) UnregisteraUnregister a cluster from a fleet. This command unregisters a cluster with the fleet by: 1. Deleting the Fleet Membership resource for this cluster (a.k.a `{parent_command} delete`). 2. Removing the corresponding in-cluster Kubernetes Resources that make the cluster exclusive to one fleet (a.k.a `kubectl delete memberships membership`). 3. [Optional for GKE cluster] Uninstalling the Connect agent from this cluster (a.k.a `kubectl delete on the gke-connect namespace`). The unregister command makes additional internal checks to ensure that all three steps can be safely done to properly clean-up in-Fleet and in-cluster resources. To unregister a GKE cluster use `--gke-cluster` or `--gke-uri` flag (no `--kubeconfig` flag is required). To unregister a third-party cluster use `--context` flag (with an optional -`-kubeconfig`s flag). To only delete the Fleet Membership resource, consider using the command: `{parent_command} delete`. This command is intended to delete stale Fleet Membership resources as doing so on a fully registered cluster will skip some of the steps above and orphan in-cluster resources and agent connections to Google. ## EXAMPLES Unregister a third-party cluster referenced from a specific kubeconfig file: $ {command} my-membership \ --context=my-cluster-context \ --kubeconfig=/home/user/custom_kubeconfig Unregister a third-party cluster referenced from the default kubeconfig file: $ {command} my-membership --context=my-cluster-context Unregister a GKE cluster referenced from a GKE URI: $ {command} my-membership \ --gke-uri=my-cluster-gke-uri Unregister a GKE cluster referenced from a GKE Cluster location and name: $ {command} my-membership \ --gke-cluster=my-cluster-region-or-zone/my-cluster Unregister a GKE cluster and uninstall Connect agent: $ {command} my-membership \ --gke-cluster=my-cluster-region-or-zone/my-cluster --uninstall-connect-agent ctj|tjdtjddd|j ddtjdd t j |y) Nz The membership name that you choose to uniquely represent the cluster being registered in the fleet. z The location of the membership resource, e.g. `us-central1`. If not specified, defaults to `global`. T)membership_help location_helpmembership_required positionalz--uninstall-connect-agent store_truez If set to True for a GKE cluster, Connect agent will be uninstalled from the cluster. No-op for third-party clusters, where Connect agent will always be uninstalled. F)actionhelpdefault)r AddMembershipResourceArgtextwrapdedent add_argumenthub_utilAddClusterConnectionCommonArgs)clsparsers 5lib/surface/container/fleet/memberships/unregister.pyArgszUnregister.Argsbs && )  oo'  !  # __   ++F3c  tj|dd}tj|j d|j d\}}d}|j }t j|r@t j|}tj|}tj|}n|r~tj|}dj|||} tj | |j#} | j$r%| j$j&j(|k(r|}|r'|j d s|j/||||||St1j2t5|ddt5|ddt5|d dt5|d dt5|d dt5|d d} | j7t1j8| | dj|||} tj | |j#} | j:s&t=j>dj|dt1j@| }| j:|k7r$tCjDdj| tjF| |j#djtRjT|}| jW|}|sKtLjNjQdjtRjTtRjT tjX||}| j[}tj\||||j#}|jNj^r=t=j>dj||jNj`||dtcjd| tSjf| |y#t*j,$rYwxYw#t*jH$r*}tCjDdj||d}~wt*jJ$r2tLjNjQdj YwxYw#tBjD$r9}tLjNjQdj||Yd}~d}~wwxYw)Nz --projectT) use_defaultsgke_uri gke_cluster)r*r+global'projects/{}/locations/{}/memberships/{}uninstall_connect_agent kubeconfigcontextpublic_issuer_urlenable_workload_identityF)r*r+r/r0r1r2aainvalid membership {0} does not have external_id field set. We cannot determine if registration is requested against a valid existing Membership. Consult the documentation on container fleet memberships update for more information or run gcloud container fleet memberships delete {0} if you are sure that this is an invalid or otherwise stale Membership) cancel_on_nozMembership [{}] is not associated with the cluster you are trying to unregister. Please double check the cluster identifier that you have supplied.UYou are not authorized to unregister clusters from project [{}]. Underlying error: {}{Membership [{}] for the cluster was not found on the fleet. It may already have been deleted, or it may never have existed.z{}={}zThere's no namespace for the label [{}]. If [gke-connect] is labeled with another project, You'll have to manually delete the namespace. You can find all namespaces by running: `kubectl get ns -l {}`aqError validating cluster's exclusivity state with the Fleet under parent collection [{}]: {}. The cluster you are trying to unregister is not associated with the membership [{}]. Continuing will delete membership related resources from your cluster, and the cluster will lose its association to the Fleet in project [{}] and can be registered into a different project. aF{} error in deleting in-cluster membership resources. You can manually delete these membership related resources from your cluster by running the command: `kubectl delete memberships membership`. By doing so, the cluster will lose its association to the Fleet in project [{}] and can be registered into a different project. )4rGetFromNamespacerGetGKEClusterResoureLinkAndURIGetValueMEMBERSHIP_NAMEr MembershipLocationSpecifiedMembershipResourceNamerMembershipShortnameMembershipLocationr!LocationFromGKEArgsformatr GetMembership ReleaseTrackendpoint gkeCluster resourceLinkapitools_exceptions HttpError_UnregisterGKEr KubernetesClientgetattrCheckClusterAdminPermissionsValidateClusterIdentifierFlags externalIdrPromptContinueGetClusterUUIDrErrorDeleteMembershipHttpUnauthorizedErrorHttpNotFoundErrorrstatusPrintr CONNECT_RESOURCE_LABELNamespacesWithLabelSelector ParentRefGetMembershipCRValidateExclusivitycodemessager DeleteMembershipResourcesDeleteConnectNamespace)selfargsprojectgke_cluster_resource_linkgke_cluster_urilocation membership_id membershipcluster_location regional_name regional_obj kube_clientnameobjuuideselector namespacesparent cr_manifestress r%RunzUnregister.Run|sW(({NG//MM), m4 / H((M,,T233D9j..z:m((4h #!55d;?FF #]m  -- 4,,.   ! !%%00==()&( !!*#  !:O!((M4II ,,i.D-64t4i.!$(;TB!(/I)."0 K,,. ,,[$?  6 = = 8],d  " "4):):)< =c ^^!! )*0 )>  % %k 2d 4  $fTl, , d&7&7&9:~~j??IH88BJ  jj239&%<<%<<3> ?*!!'84f//1k  ( (fm)-):):)< >c !! 5 6rsUK&'>79A?G@@GK:*#2q,,qr'