Uninstalling the Compliance Operator

You can remove the OpenShift Compliance Operator from your cluster by using the OKD web console or the CLI.

Uninstalling the OpenShift Compliance Operator from OKD using the web console

To remove the Compliance Operator, you must first delete the objects in the namespace. After the objects are removed, you can remove the Operator and its namespace by deleting the openshift-compliance project.

Prerequisites

• Access to an OKD cluster using an account with cluster-admin permissions.

• The OpenShift Compliance Operator must be installed.

Procedure

To remove the Compliance Operator by using the OKD web console:

1. Go to the Operators → Installed Operators → Compliance Operator page.

   1. Click All instances.

   2. In All namespaces, click the Options menu and delete all ScanSettingBinding, ComplainceSuite, ComplianceScan, and ProfileBundle objects.

2. Switch to the Administration → Operators → Installed Operators page.

3. Click the Options menu on the Compliance Operator entry and select Uninstall Operator.

4. Switch to the Home → Projects page.

5. Search for ‘compliance’.

6. Click the Options menu next to the openshift-compliance project, and select Delete Project.

   1. Confirm the deletion by typing openshift-compliance in the dialog box, and click Delete.

Uninstalling the OpenShift Compliance Operator from OKD using the CLI

To remove the Compliance Operator, you must first delete the objects in the namespace. After the objects are removed, you can remove the Operator and its namespace by deleting the openshift-compliance project.

Prerequisites

• Access to an OKD cluster using an account with cluster-admin permissions.

• The OpenShift Compliance Operator must be installed.

Procedure

1. Delete all objects in the namespace.

   1. Delete the ScanSettingBinding objects:

      $ oc delete ssb <ScanSettingBinding-name> -n openshift-compliance

   2. Delete the ScanSetting objects:

      $ oc delete ss <ScanSetting-name> -n openshift-compliance

   3. Delete the ComplianceSuite objects:

      $ oc delete suite <compliancesuite-name> -n openshift-compliance

   4. Delete the ComplianceScan objects:

      $ oc delete scan <compliancescan-name> -n openshift-compliance

   5. Obtain the ProfileBundle objects:

      $ oc get profilebundle.compliance -n openshift-compliance

      Example output

      NAME     CONTENTIMAGE                                                                     CONTENTFILE         STATUS
      ocp4     registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:<hash>   ssg-ocp4-ds.xml     VALID
      rhcos4   registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:<hash>   ssg-rhcos4-ds.xml   VALID

   6. Delete the ProfileBundle objects:

      $ oc delete profilebundle.compliance ocp4 rhcos4 -n openshift-compliance

      Example output

      profilebundle.compliance.openshift.io "ocp4" deleted
      profilebundle.compliance.openshift.io "rhcos4" deleted

2. Delete the Subscription object:

   $ oc delete sub <Subscription-Name> -n openshift-compliance

3. Delete the CSV object:

   $ oc delete CSV -n openshift-compliance

4. Delete the project:

   $ oc delete project -n openshift-compliance

   Example output

   project.project.openshift.io "openshift-compliance" deleted

Verification

1. Confirm the namespace is deleted:

   $ oc get project/openshift-compliance

   Example output

   Error from server (NotFound): namespaces "openshift-compliance" not found