Uninstalling Tetrate Service Express

If you want to offboard an individual EKS cluster from TSE, follow the first step.

If you want to completely uninstall TSE, offboard (or delete) each cluster and then uninstall the Management Plane component.

Use the correct kubectl context!

At each step, check that you are using the kubectl context that refers to the Kubernetes cluster you wish to uninstall from

1. Offboard an EKS Cluster

   Offboard the cluster from TSE

   De-register the cluster with the running TSE Management Plane:

   tctl delete cs cluster-name

   Delete the Control Plane install

   Uninstall the control plane chart, and remove the resources created during the installation process that are untracked by Helm.

   helm uninstall tse-cp --namespace istio-system
   
   kubectl delete serviceaccount tsb-helm-delete-hook --ignore-not-found
   kubectl delete clusterrole tsb-helm-delete-hook --ignore-not-found
   kubectl delete clusterrolebinding tsb-helm-delete-hook --ignore-not-found
   kubectl delete apiservices.apiregistration.k8s.io v1beta1.external.metrics.k8s.io --ignore-not-found
   kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io xcp-edge-istio-system --ignore-not-found
   kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io xcp-edge-istio-system --ignore-not-found
   Known Issue

   In some situations, the helm uninstall will not remove some or all of the istio-system, xcp-multicluster and cert-manager namespaces. You should check and remove these namespaces:

   kubectl delete namespace xcp-multicluster --ignore-not-found
   kubectl delete namespace cert-manager --ignore-not-found
   kubectl delete namespace istio-system --ignore-not-found

   Also check for orphaned secrets in the istio-system namespace (kubectl get secret -n istio-system) and ensure they are deleted.

2. Uninstall the TSE Management Plane

   Management Plane Uninstallation

   Uninstall the management plane chart, and remove the resources created during the installation process that are untracked by Helm.

   helm uninstall tse-mp --namespace tse
   
   kubectl delete serviceaccount tsb-helm-delete-hook --ignore-not-found
   kubectl delete clusterrole tsb-helm-delete-hook --ignore-not-found
   kubectl delete clusterrolebinding tsb-helm-delete-hook --ignore-not-found
   kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io xcp-central-tsb --ignore-not-found
   kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io xcp-central-tsb --ignore-not-found
   Known Issue

   Check for orphaned secrets in the tse namespace (kubectl get secret -n tse) and ensure they are deleted.

3. Unregister the Helm chart repo

   Once done, you can then unregister Tetrate's Helm chart repo:

   helm repo remove tse