Uninstalling IBM Certificate manager

Before you can install the Red Hat® OpenShift® certificate manager (cert-manager Operator), you must uninstall the IBM Certificate manager.

Who needs to complete this task?: Cluster administrator A cluster administrator must complete this task.

When do you need to complete this task?: One-time setup Complete this task before you uninstall the IBM Certificate manager.

Before you begin

Best practice: You can run many of the commands in this task exactly as written if you set up environment variables for your installation. For instructions, see Setting up installation environment variables.

Ensure that you source the environment variables before you run the commands in this task.

Procedure

Get the list of the IBM Certificate manager configuration instances:
```
oc get certmanagerconfig \
-n ${PROJECT_CERT_MANAGER}
```
Delete each configuration instance returned by the preceding command:
```
oc delete certmanagerconfig <name> \
-n ${PROJECT_CERT_MANAGER}
```
Uninstall the IBM Certificate manager operator:
1. Delete the operator subscription:
```
oc delete sub ibm-cert-manager-operator \
-n ${PROJECT_CERT_MANAGER}
```
2. Find any ibm-cert-manager cluster service versions (CSVs):
```
oc get csv \
-n ${PROJECT_CERT_MANAGER} \
| grep ibm-cert-manager
```
3. Delete the CSVs returned by the previous command:
```
oc delete csv <name> \
-n ${PROJECT_CERT_MANAGER}
```
Verify that the following IBM Certificate manager resources are deleted:
1. Check for any deployments with the app.kubernetes.io/component=cert-manager label:
```
oc get deployments \
-n ${PROJECT_CERT_MANAGER} \
-l app.kubernetes.io/component=cert-manager
```
2. If any deployments are returned by the preceding command, delete them:
```
oc delete deployments <name> \
-n ${PROJECT_CERT_MANAGER}
```
3. Check for any services with the following app=ibm-cert-manager-webhook label:
```
oc get service \
-n ${PROJECT_CERT_MANAGER} \
-l app=ibm-cert-manager-webhook
```
4. If any services are returned by the preceding command, delete them:
```
oc delete service <name> \
-n ${PROJECT_CERT_MANAGER}
```
5. Check for any cert-manager-webhook mutating web hook configurations:
```
oc get mutatingwebhookconfiguration \
-n ${PROJECT_CERT_MANAGER} \
| grep cert-manager-webhook
```
6. If any mutating web hook configurations are returned by the preceding command, delete them:
```
oc delete mutatingwebhookconfiguration <name> \
-n ${PROJECT_CERT_MANAGER}
```
7. Check for any cert-manager-webhook validating web hook configurations:
```
 oc get validatingwebhookconfiguration \
-n ${PROJECT_CERT_MANAGER} \
| grep cert-manager-webhook
```
8. If any validating web hook configurations are returned by the preceding command, delete them:
```
oc delete validatingwebhookconfiguration <name> \
-n ${PROJECT_CERT_MANAGER}
```