How to delete Network Zone in Managed cluster

bhushangholap · ‎03 May 2023

If you have Network Zones in managed cluster that are not using any ActiveGate's or OneAgent's and if you would like to delete those you can follow below steps :

Network Zone with no ActiveGate or OneAgent looks like below :

If you use Network Zone delete API, you might get

{
  "error": {
    "code": 400,
    "message": "Deletion of network zone has to be done via cluster API on this cluster."
  }
}

Or if you try cluster API you might get below error :
```
{ "error": { "code": 401, "message": "Token Authentication failed" } }
```
This can be if you are missing ServiceProviderAPI scope. And you cant find this scope at tenant level.
On Managed clusters Network Zones are cluster wide hence they can not be deleted at tenant/environment level. They have to be deleted at cluster level using Cluster API.
To get an API-Token with the ServiceProviderAPI scope, go into the CMC of the Cluster under Settings then to API Tokens. Click on Generate Token under Cluster Token, give it a name and enable ServiceProviderAPI for the access scope.
The new generated token should now be able to authenticate for the deletion REST API endpoint for Network Zones. Which you can use to delete the network zone.
You can also refer cluster-configuration-token

ChadTurner · ‎12 May 2023

@bhushangholap Thank you for sharing this for all out Managed customers!