clean-uninstall

name	clean-uninstall
description	Use when the user wants to uninstall, remove, or clean up the quanton-operator Helm chart and its leftover secrets from a Kubernetes cluster
allowed-tools	Bash, Read, Glob, Grep, AskUserQuestion

Clean Uninstall Quanton Operator

Fully removes the Quanton Operator Helm release, cleans up secrets it created across namespaces, and removes the CRD.

Why This Exists

helm uninstall removes the chart resources but leaves behind:

• Secrets the operator replicated to job namespaces:
  • quanton-operator-cert
  • quanton-operator-docker-secret
  • quanton-operator-mtls-secret
• The CRD (quantonsparkapplications.quantonsparkoperator.onehouse.ai) — Helm never deletes CRDs on uninstall by design.

The cleanup script at scripts/cleanup-secrets.sh handles finding and deleting secrets and the CRD.

Execution Flow

Step 1: Verify prerequisites

Check that kubectl and helm are available. Stop if either is missing.

Step 2: Show current state

Run these and show the user what's installed:

helm list -A | grep quanton-operator
kubectl get secrets -A | grep quanton-operator
kubectl get crd quantonsparkapplications.quantonsparkoperator.onehouse.ai 2>/dev/null

If neither the Helm release, secrets, nor CRD are found, tell the user there's nothing to clean up and stop.

Step 3: Confirm with user

Show what will be removed (Helm release and/or secrets) and ask the user to confirm before proceeding.

Step 4: Uninstall Helm release

If the Helm release exists, uninstall it:

helm uninstall quanton-operator -n quanton-operator

Wait for completion. If the namespace quanton-operator is now empty, ask the user if they'd like to delete it too.

Step 5: Clean up secrets and CRD

Run the cleanup script in dry-run mode first to show what will be deleted:

./scripts/cleanup-secrets.sh

Then run with --confirm:

./scripts/cleanup-secrets.sh --confirm

Step 6: Verify

Run these to confirm everything is gone:

kubectl get secrets -A | grep quanton-operator
kubectl get crd quantonsparkapplications.quantonsparkoperator.onehouse.ai 2>/dev/null

Report the result to the user.

Error Handling

• If helm uninstall fails, show the error and check if the release even exists (helm list -A).
• If the cleanup script isn't executable, run chmod +x scripts/cleanup-secrets.sh first.
• Never expose credentials or secret values in output.