This page guides you through how to delete storage buckets within Google Distributed Cloud (GDC) air-gapped environments. It covers prerequisites and methods for deleting buckets through the GDC console and command line interface (CLI). Learn how to delete buckets with retention policies by crypto shredding—a process where you delete the encryption key associated with the storage bucket. This information lets you securely and permanently manage the lifecycle of your object storage, providing data hygiene and compliance
This page is for audiences such as IT admins within the infrastructure operator group or developers within the application operator group who are responsible for managing object storage resources in GDC air-gapped environments. For more information, see Audiences for GDC air-gapped documentation.
Before you begin
A project namespace manages bucket resources in the Management API server. You must have a project to work with buckets and objects.
You must also have the appropriate bucket permissions to perform the following operation. See Grant bucket access.
Delete storage buckets
Console
- In the navigation menu, click Object Storage.
- Click delete Delete at the end of the row of the bucket to be deleted.
- Wait a few minutes and refresh the page to check that the bucket is deleted.
CLI
You can delete storage buckets by using the CLI. Buckets must be empty before you can delete them.
Use the
GET
orDESCRIBE
command from the View bucket configuration section to get the fully qualified bucket name.If the bucket is not empty, delete files within the bucket:
gdcloud storage rm --recursive -a s3://BUCKET/**
Delete the empty bucket:
kubectl delete buckets/BUCKET_NAME --namespace NAMESPACE_NAME
Crypto shred bucket
Retrieve the information about the AEADKey based on Verify bucket resource creation and follow Delete a key to delete the AEADKey, then the entire bucket would be crypto shredded.
You can run the following command to verify the bucket has been successfully crypto shredded. The BucketReady
should be False
and Reason
to be BucketCryptoShredded
.
kubectl get Buckets BUCKET_NAME -n NAMESPACE_NAME