Skip to content

(chore): Update teardown script #115

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vikin91 merged 3 commits into from
Dec 5, 2025
Merged

(chore): Update teardown script #115

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
203e84d
Empty commit
vikin91 Dec 3, 2025
f17ce5a
Add more things to cleanup to the teardown script
vikin91 Dec 3, 2025
d4d1ad6
Add --wait and consolidate 3 waits into a single one
vikin91 Dec 5, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions scripts/runtime/teardown.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,14 @@ source "$(dirname "$SCRIPT")/../../lib/common.sh"

test_in_well_known_dev_context

# Uninstall Helm releases first to let Helm clean up its managed resources properly.
for release in stackrox-central-services stackrox-secured-cluster-services stackrox-monitoring; do
if helm status "$release" -n stackrox &>/dev/null; then
einfo "Uninstalling Helm release: $release"
helm uninstall "$release" -n stackrox --wait || true
fi
done

# Collect all stackrox PVs before we delete the respective PVCs.
IFS=$'\n' read -d '' -r -a stackrox_pvs < <(
kubectl get pv -o json | jq -r '.items[] | select(.spec.claimRef.namespace == "stackrox") | .metadata.name'
Expand All @@ -21,6 +29,16 @@ kubectl -n stackrox get cm,deploy,ds,hpa,networkpolicy,role,rolebinding,secret,s
# Only delete cluster-wide RBAC/PSP-related resources that contain have the app.kubernetes.io/name=stackrox label.
kubectl -n stackrox get clusterrole,clusterrolebinding,psp,validatingwebhookconfiguration -o name -l app.kubernetes.io/name=stackrox | xargs kubectl -n stackrox delete --wait

# Delete cluster-wide resources that are not labeled and may cause issues if left behind.
# - SecurityPolicy CRD: can cause "managedFields must be nil" errors when reinstalling via Helm.
# - Monitoring ClusterRoles/ClusterRoleBindings: managed by stackrox-monitoring Helm release.
kubectl delete \
crd/securitypolicies.config.stackrox.io \
clusterrole/stackrox-monitoring \
clusterrole/stackrox-monitoring-kube-state-metrics \
clusterrolebinding/stackrox-monitoring-kube-state-metrics \
--ignore-not-found --wait

## DO NOT RUN THIS IN A CUSTOMER ENVIRONMENT, IT WILL DELETE ALL THEIR DATA
## AND THEY WILL NEVER TALK TO US AGAIN.
[[ "${#stackrox_pvs[@]}" == 0 ]] || kubectl delete --wait pv "${stackrox_pvs[@]}"
Expand Down