Uninstall

Remove the products first, then the base chart. Then delete what Helm leaves behind.

Uninstall the products

For each product, run:

helm uninstall <PRODUCT> --namespace rft-app-<PRODUCT>

When the platform registers the products at Entra ID (see Sign-in), the base chart's controller deletes each product's registration. Keep the rft-entra Secret until the products are gone. At any other provider, a product's client stays. Delete it there.

Uninstall the base chart

helm uninstall rft-base --namespace rft-system

Delete the CustomResourceDefinitions

The platform's CustomResourceDefinitions stay, so a reinstall keeps working. Remove them last, when nothing uses them.

Deleting directoryusers and directorygroups deletes the people and groups your identity provider provisioned. Stop provisioning there first, then run:

kubectl delete customresourcedefinition platformapps.rigfab.com bucketclaims.rigfab.com directoryusers.rigfab.com directorygroups.rigfab.com

Delete the Secrets

The Secrets the controller made in rft-system, such as rft-directory and rft-object-storage, stay until you delete them.

If a namespace won't delete

If the base chart was removed first, a product's PlatformApp keeps its namespace from being deleted. Remove its finalizer, then delete the namespace:

kubectl --namespace rft-app-<PRODUCT> patch platformapp <PRODUCT> --type merge -p '{"metadata":{"finalizers":[]}}'