Unable to delete AWS resources created by Tanzu Mission Control after trial expires

Products

• Tanzu Mission Control

Issue/Introduction

This article will help to clean up AWS resources when a TMC trial is over.

Symptoms:

Automatic recreation of AWS resources is observed after the Tanzu Mission Control (TMC) trial expires. For example, If a user tries to delete NAT gateway, a new NAT gateway gets created automatically.

Cause

The lifecycle Management credential from TMC has not been deleted.

Clusters and other associated resources running are in the account, and they continue to exist until the cloud provider's tools are used

to remove them.

For more information related to the removal of the lifecycle management credential, refer to Remove a Cluster Lifecycle Management Credential.

Resolution

Delete the clusters from TMC before cleaning up AWS resources such as CloudFormation Template, Stack, VPC, and other components.

Workaround:

If the the clusters have not been deleted manually from TMC, disable the IAM role that was created by TMC if the trial is expired. This will remove TMC access to AWS. This will prevent TMC from recreating AWS resources.

The following are the AWS roles that need to be deleted from an account in order to decommission the AWS resources:

 

Additional Information

Impact/Risks:

Automatic recreation of AWS resources incurs additional costs.