-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
4.13, 4.12, 4.14, 4.15, 4.16, 4.17
-
Important
-
None
-
False
-
Description of problem:
In the ALBO documentation, it states that the following tag is required for subnet discovery:
kubernetes.io/cluster/${Cluster Infra ID}:owned
However, the ROSA SRE team confirmed in this slack thread that a BYOVPC could be deleted by the cluster uninstaller if it contains that tag with value of owned, causing the undesired deletion of customer's VPC and potential disruption to their environment.
The ALBO GitHub tells that either value owned or shared, are accepted.
This should be included in the ALBO documentation and a warning informing that the shared value should be used in BYOVPC clusters.
How reproducible:
1- Install a ROSA classic cluster using pre-existing VPC (BYOVPC) 2- Install the ALB operator and configure the required tags for subnet discovery with value of "owned" 3- Delete the cluster
Actual results:
The pre-existing VPC is deleted due to the kubernetes.io/cluster/${Cluster Infra ID}:owned key:value tag
Expected results:
The key:value tag kubernetes.io/cluster/${Cluster Infra ID}:shared should be used instead to prevent the deletion of the VPC by the cluster uninstaller