k8s 删除ns 卡住的解决办法

在某些情况下，在k8s中会无法删除某个namespace，它会一直卡在terminating状态下。解决这个问题的步骤为：

kubectl api-resources --verbs=list --namespaced -o name   | xargs -n 1 kubectl get --show-kind --ignore-not-found -n <namespace>

 这个指令找到阻碍这个namespace删除的资源，然后手动删除这些资源。

但是大部分时候，这些资源也杀不掉，解决办法是执行

kubectl edit pod -o json

 然后找到里面的"finalizers"，把它的值设置成一个空数组。

解决这些资源后，参照以下文档删除那个ns:

Resolution

To delete a namespace stuck in the finalizing state:

1. Enable docker admin client bundle

2. GET the namespace object

   $ NAMESPACE=skynet $ kubectl get ns $NAMESPACE -o json > /tmp/${NAMESPACE}.json $ cat /tmp/${NAMESPACE}.json { "apiVersion": "v1", "kind": "Namespace", "metadata": { "creationTimestamp": "2019-02-04T16:15:06Z", "name": "skynet", "resourceVersion": "20879144", "selfLink": "/api/v1/namespaces/skynet", "uid": "0951bcf9-2898-11e9-8e38-0242ac11000b" }, "spec": { "finalizers": [ "kubernetes" ] }, "status": { "phase": "Active" } } 

3. Use a text editor to delete the all elements in finalizer array, leaving only an empty array [] such as below example:

   {
   "apiVersion": "v1",
   "kind": "Namespace",
   "metadata": {
   "creationTimestamp": "2019-02-04T16:15:06Z",
   "name": "skynet", "resourceVersion": "20879144", "selfLink": "/api/v1/namespaces/skynet", "uid": "0951bcf9-2898-11e9-8e38-0242ac11000b" }, "spec": { "finalizers": [ ] }, "status": { "phase": "Active" } } 

4. PUT the namespace object without the finalizer

   a. Get a bearer token

   ```
   UCP_URL=ucp.example.com USERNAME=admin PASSWORD=supersecretadminpassword curl -sk -d "{\"username\":\"$USERNAME\",\"password\":\"$PASSWORD\"}" https://${UCP_URL}/auth/login | jq -r .auth_token > auth-token ``` 

   b. Issue an HTTP PUT

   `curl -k -H "Content-Type: application/json" -X PUT --data-binary @tmp.json https://kubernetes-cluster-ip/api/v1/namespaces/skynet/finalize` Example: `curl -k -H "Content-Type: application/json" -H "authorization: Bearer $(cat ./auth-token)" -X PUT --data-binary @/tmp/skynet.json https://ucp.example.com/api/v1/namespaces/skynet/finalize` 

After the finalizer array is empty and the status is in terminating, kubernetes will delete the namespace.

 

参考：https://success.docker.com/article/kubernetes-namespace-stuck-in-terminating