diff --git a/content/rancher/v2.x/en/admin-settings/removing-rancher/_index.md b/content/rancher/v2.x/en/admin-settings/removing-rancher/_index.md new file mode 100644 index 00000000000..99def8d7d57 --- /dev/null +++ b/content/rancher/v2.x/en/admin-settings/removing-rancher/_index.md @@ -0,0 +1,30 @@ +--- +title: Removing Rancher +weight: 2000 +draft: true +--- + +## Removing Rancher From Nodes + +### Hosted Kubernetes Providers + +### Nodes Hosted by IaaS + +### Custom Nodes + +### Imported Cluster + +After you initiate the removal of an imported cluster using the Rancher UI (or API), the following events occur. + +1. Rancher creates a `serviceAccount` that it uses to remove the cluster. This account is assigned the [clusterRole](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole) and [clusterRoleBinding](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#rolebinding-and-clusterrolebinding) permissions, which are required to remove the cluster. + +1. Using the `serviceAccount`, Rancher schedules and runs a [job](https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/) that cleans the Rancher and Kubernetes components off of the node. This job also references the `serviceAccount` and its roles as dependencies, so the job deletes them before its completion. This process: + + - Removes the `cattle-system` namespace from the cluster. + - Cleans up all remaining namespaces in the cluster (i.e., removes finalizers, annotations, and labels) + + >**Using 2.0.7 or Earlier?** + > + >These versions of Rancher do not automatically delete the `serviceAccount`, `clusterRole`, and `clusterRole` resources after the job runs. You'll have to delete them yourself. + +1. Rancher is removed from the cluster nodes. However, the cluster persists, running the native version of Kubernetes. \ No newline at end of file