KubeDay Japan 2024

Have you ever experienced troubles that your apps on Kubernetes become unavailable or undeletable due to an unintentional deletion of an incorrect resource, such as a secret? Deleting incorrect resources can lead to inconsistencies and negative impact on the apps or the cluster. There're discussions to features to prevent misdeletion and control the deletion order with consideration for dependencies, a.k.a Lien, in KEP-2839. But, some significant missing features have hindered progress in the discussion. There're efforts in Crossplane to add them that address use cases similar to Lien. We will introduce use cases and requirements discussed in the KEP. Then, we'll demonstrate how Crossplane works with these features. You'll understand key considerations and mitigation methods for Kubernetes administrators regarding resource deletion, such as diffrences in access rights to resources, permissions to set up resource protection and privileges between general users and administrators, etc.