Manual steps for uninstalling singleton services - Cert Manager

This version of documentation is no longer updated. For the latest information, see the following links:
- Continuous Delivery (CD) documentation
- Support Cycle-2 (SC-2) documentation

Uninstall the IBM Cert Manager operator. Switch to the namespace where you deployed the IBM Cert Manager. Ensure that you switch to the ibm-cert-manager namespace unless the namespace was changed during installation of Cert Manager.

You can uninstall the Cert Manager operator with one of the following methods:

Uninstalling IBM Cert Manager using the console

To uninstall the IBM Cert Manager, complete the following steps:

  1. Login to the OpenShift Container Platform console as a cluster administrator.
  2. Delete the CertManagerConfig instance.
    1. Click Operators > Installed Operators > IBM Cert Manager Operator > CertManagerConfig.
    2. Delete all CertManagerConfig instances.
  3. Uninstall the IBM Cert manager operator.
    1. DO NOT select the Delete all operand instances for this operator checkbox for the next step.
    2. Click Operators > Installed Operators > the overflow menu icon > Uninstall Operator.
  4. Verify that IBM Cert Manager resources are uninstalled.
    1. Click Workloads > Deployments.
    2. Ensure that the following resources are not in the list of Deployments:
      • cert-manager-cainjector
      • cert-manager-controller
      • cert-manager-webhook
      • ibm-cert-manager-operator If the services exist in the list, delete them.
    3. Click Networking > Services.
    4. Ensure that cert-manager-webhook is not in the Services list. If cert-manager-webhook exists in the list, delete it.
  5. Verify that MutatingWebhookConfiguration and ValidatingWebhookConfiguration resources are uninstalled.
    1. Click Home > Search > MutatingWebhookConfiguration.
    2. Ensure that cert-manager-webhook is not in the MutatingWebhookConfiguration list. If cert-manager-webhook exist in the list, delete it.
    3. Click Home > Search > ValidatingWebhookConfiguration.
    4. Ensure that cert-manager-webhook is not in the ValidatingWebhookConfiguration list. If cert-manager-webhook exist in the list, delete it.

Uninstalling IBM Cert manager using the CLI

To uninstall the IBM Cert Manager, complete the following steps:

  1. Switch to the namespace where you installed the ibm-cert-manager operator.

    oc project <cert-manager-namespace>

  2. Delete all the CertManagerConfiginstances.

    oc get certmanagerconfig

    oc delete certmanagerconfig <name>

  3. Uninstall the IBM Cert Manager operator:

    oc delete sub ibm-cert-manager-operator

    oc get csv | grep ibm-cert-manager

    oc delete csv <csv_name>

  4. Verify that all IBM Cert Manager resources are deleted.

    oc get deployments -n <cert-manager-namespace> -l app.kubernetes.io/component=cert-manager

    oc get service -n <cert-manager-namespace> -l app=ibm-cert-manager-webhook

    oc get mutatingwebhookconfiguration | grep cert-manager-webhook

    oc get validatingwebhookconfiguration | grep cert-manager-webhook

If the deployments, services, and webhook configuration exist for the IBM Cert Manager, delete them.

   oc delete mutatingwebhookconfiguration cert-manager-webhook

   oc delete validatingwebhookconfiguration cert-manager-webhook