Removing cert-manager Operator for Red Hat OpenShift resources

After you uninstall the cert-manager Operator for Red Hat OpenShift, you can delete its associated resources from your cluster.

Prerequisites
  • You have access to the cluster with cluster-admin privileges.

  • You have access to the Red Hat OpenShift Container Platform web console.

Procedure
  1. Log in to the Red Hat OpenShift Container Platform web console.

  2. Remove the deployments of the cert-manager components, such as cert-manager, cainjector, and webhook, present in the cert-manager namespace.

    1. Click the Project drop-down menu to see a list of all available projects, and select the cert-manager project.

    2. Navigate to WorkloadsDeployments.

    3. Select the deployment that you want to delete.

    4. Click the Actions drop-down menu, and select Delete Deployment to see a confirmation dialog box.

    5. Click Delete to delete the deployment.

    6. Alternatively, delete deployments of the cert-manager components such as cert-manager, cainjector and webhook present in the cert-manager namespace by using the command-line interface (CLI).

      $ oc delete deployment -n cert-manager -l app.kubernetes.io/instance=cert-manager
  3. Optional: Remove the custom resource definitions (CRDs) that were installed by the cert-manager Operator for Red Hat OpenShift:

    1. Remove the finalizers from the CertManager custom resource (CR) by running the following command:

      $ oc patch certmanagers.operator cluster --type=merge -p='{"metadata":{"finalizers":null}}'
    2. Navigate to AdministrationCustomResourceDefinitions.

    3. Enter certmanager in the Name field to filter the CRDs.

    4. Click the Options menu kebab next to each of the following CRDs, and select Delete Custom Resource Definition:

      • Certificate

      • CertificateRequest

      • CertManager (operator.openshift.io)

      • Challenge

      • ClusterIssuer

      • Issuer

      • Order

  4. Optional: Remove the cert-manager-operator namespace.

    1. Navigate to AdministrationNamespaces.

    2. Click the Options menu kebab next to the cert-manager-operator and select Delete Namespace.

    3. In the confirmation dialog, enter cert-manager-operator in the field and click Delete.