[OSDOCS-4158]: New ccoctl steps for cluster capabilities

[jeana-redhat]

Version(s):
4.14+

Issue:
OSDOCS-4158

Link to docs preview:

• Creating credentials for OpenShift Container Platform components with the ccoctl tool (AliCloud)
• Manually creating IAM (IBM)
• Configuring IAM for Nutanix
• Creating AWS resources with a single command (topic is reused by GCP; Azure version is in-flight in another PR and will need the --included update in this PR when the other merges)
• Creating AWS resources individually
• Creating the Kubernetes manifest and Ignition config files (ASH)
• Deleting AWS resources with the Cloud Credential Operator utility
• Deleting Microsoft Azure resources with the Cloud Credential Operator utility
• Deleting GCP resources with the Cloud Credential Operator utility
• Preparing to update a cluster with manually maintained credentials, throughout, but primarily:
  • Extracting and preparing credentials request resources
  • Updating cloud provider resources with the Cloud Credential Operator utility
  • Manually updating cloud provider resources

QE review:

• QE has approved this change.

Additional information:

• Also adjusting existing content for consistency/style adherence.
• Locations will change when [OSDOCS-6134]: Moving AWS & GCP short term creds install procs #60222 merges
• Some of the numbering is off while i have commented lines in here to ask dev about, will resolve before merge.

[ocpdocs-previewbot]

🤖 Updated build preview is available at:
https://62148--docspreview.netlify.app

Build log: https://circleci.com/gh/ocpdocs-previewbot/openshift-docs/27697

[jianping-shu]

Updating cloud provider resources with the Cloud Credential Operator utility
On the page there's still description to be deleted i.e. “If your cluster uses cluster capabilities to disable one or more optional components, delete the CredentialsRequest custom resources for any disabled components.”

[jeana-redhat]

Took a guess based on existing docs about kubeconfig and Jianping's comment that we need to point to that instead of install-config.yaml. @wking or @jianping-shu please correct this since I probably guessed wrong 🙂

[jianping-shu]

You are right!

[wking]

I think we can drop this line.

• Kubeconfigs are not install-configs, so --install-config here will fail with "hey, this file content is not an install config".
• We have docs for lots and lots of oc ... commands that just assume the user has figured out how to access a cluster via a kubeconfig. For example, this existing docs have:

Prerequisites

• You have access to an OpenShift Container Platform account with cluster administrator permissions.
• You have installed the OpenShift CLI (oc).

and then when they tell you to use oc, they say:

To determine the mode that the CCO is configured to use, enter the following command:

$ oc get cloudcredentials cluster -o=jsonpath={.spec.credentialsMode}

without talking about kubeconfigs or profiles or any of that stuff.

[adellape]

Nice work navigating these complex conditionals. Only a few nits inline, and 2 other suggestions not worth putting in-line:

• Not sure if I'm overthinking style guide on this, but CTRL+F the PR for "needs" and consider whether they should be "requires".
• For any of the .Example output or .Partial example output blocks, consider [source,text] instead of [source,terminal] per latest repo guidelines (the coloring/highlighting can get funny/random when using terminal).

[jeana-redhat]

@adellape tysm for the careful review and great feedback! 🙇

[jeana-redhat]

Content tagged azure-workload-id in this file will not show up in the preview build for this PR. This will be viewable in #64001 when I rebase it to get the changes here into main

[jstuever]

/uncc

[jianping-shu]

I can understand for cluster upgrade and "ccoctl gcp delete" cases, the KUBECONFIG is already configured to the alive cluster, so only --included is enough.

https://62148--docspreview.netlify.app/openshift-enterprise/latest/installing/installing_azure/uninstalling-cluster-azure#cco-ccoctl-deleting-sts-resources_uninstall-cluster-azure
I checked with @huangmingxia , "ccoctl azure delete" needs two more parameters, pls. help check and you can change it in the Azure worload Id doc PR I think.
ccoctl azure delete --name= --region=<azure_region> --subscription-id=<> --delete-oidc-resource-group

LGTM for QE

[jeana-redhat]

Thank you so much @jianping-shu 🙏 And yes, I think the other PR is a good place to add that Azure detail. I will go make a note of it now so I don't lose it 🙂

[jeana-redhat]

/cherrypick enterprise-4.14

[openshift-cherrypick-robot]

@jeana-redhat: new pull request created: #66197

In response to this:

/cherrypick enterprise-4.14

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.