Function run_revoke_multi_cluster 

pub async fn run_revoke_multi_cluster(
    namespace: &str,
    service_account: &str,
) -> Result<()>

Revoke all resources that bootstrap mc created for a given service account.

Deletes in reverse creation order (bindings before roles, roles before SA) so that access is cut off at the earliest possible step. Missing resources are silently skipped — it is safe to call this function more than once.

Run this command against the queen-ship cluster (the same context used when the resources were originally created).

Arguments

• namespace - Namespace the resources were created in
• service_account - Name of the ServiceAccount that was created by bootstrap mc

Errors

Returns an error if the Kubernetes API call fails for any reason other than 404.