Uninstalling Zero Trust Workload Identity Manager resources by using the CLI

Remove Zero Trust Workload Identity Manager resources from your cluster using the CLI. This deletes the remaining operands and definitions to help ensure a clean environment after you uninstall the product.

Prerequisites

  • You have access to the cluster with cluster-admin privileges.

Procedure

  1. Uninstall the operands by running each of the following commands:

    1. Delete the SpireOIDCDiscoveryProvider cluster by running the following command:

      $ oc delete SpireOIDCDiscoveryProvider cluster

    2. Delete the SpiffeCSIDriver cluster by running the following command:

      $ oc delete SpiffeCSIDriver cluster -l

    3. Delete the SpireAgent cluster by running the following command:

      $ oc delete SpireAgent cluster

    4. Delete the SpireServer cluster by running the following command:

      $ oc delete SpireServer cluster

    5. Delete the ZeroTrustWorkloadIdentityManager cluster by running the following command:

      $ oc delete ZeroTrustWorkloadIdentityManager cluster

    6. Delete the persistent volume claim (PVC) by running the following command:

      $ oc delete pvc -l=app.kubernetes.io/name=spire-server

    7. Delete the service by running the following command:

      $ oc delete service -l=app.kubernetes.io/name=zero-trust-workload-identity-manager -n zero-trust-workload-identity-manager

    8. Delete the namespace by running the following command:

      $ oc delete ns zero-trust-workload-identity-manager

    9. Delete the cluster role by running the following command:

      $ oc delete clusterrole -l=app.kubernetes.io/name=zero-trust-workload-identity-manager

    10. Delete the admission webhook configuration by running the following command:

      $ oc delete validatingwebhookconfigurations -l=app.kubernetes.io/name=zero-trust-workload-identity-manager

  2. Delete the custom resource definitions (CRDs) by running each of the following commands:

    1. Delete the SPIRE Server CRD by running the following command:

      $ oc delete crd spireservers.operator.openshift.io

    2. Delete the SPIRE Agent CRD by running the following command:

      $ oc delete crd spireagents.operator.openshift.io

    3. Delete the SPIFFEE CSI Drivers CRD by running the following command:

      $ oc delete crd spiffecsidrivers.operator.openshift.io

    4. Delete the SPIRE OIDC Discovery Provider CRD by running the following command:

      $ oc delete crd spireoidcdiscoveryproviders.operator.openshift.io

    5. Delete the SPIRE and SPIFFE cluster federated trust domains CRD by running the following command:

      $ oc delete crd clusterfederatedtrustdomains.spire.spiffe.io

    6. Delete the cluster SPIFFE IDs CRD by running the following command:

      $ oc delete crd clusterspiffeids.spire.spiffe.io

    7. Delete the SPIRE and SPIFFE cluster static entries CRD by running the following command:

      $ oc delete crd clusterstaticentries.spire.spiffe.io

    8. Delete the Zero Trust Workload Identity Manager CRD by running the following command:

      $ oc delete crd zerotrustworkloadidentitymanagers.operator.openshift.io
Verification

To verify that the resources have been deleted, replace each oc delete command with oc get, and then run the command. If no resources are returned, the deletion was successful.

← Previous: Uninstalling the Zero Trust Workload Identity Manager | ↑ Up: SPIFFE | ⌂ Home: Red Hat OpenShift Container Platform | Next: Encrypt sensitive data at rest →