Cleaning everything up

Disable the cluster first:

./spirlctl cluster disable "cluster-1" --trust-domain "example.com"

Then delete the cluster from the trust domain:

./spirlctl cluster delete "cluster-1" --trust-domain "example.com"

Cleaning up the Defakto components

If your cluster is disposable

Simply delete the kind cluster:

kind delete cluster --name "cluster-1"

If you want to keep the cluster

Ensure you’ve removed any references to the SPIFFE CSI driver (including the spiffe-demo-app) before proceeding:

kubectl delete namespace spiffe-demo

Next, simply delete the Defakto namespace and the spirlctl utility:

kubectl delete namespace spirl-system && rm ./spirlctl

As a final step, remove the admission controller from the Kubernetes cluster:

kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io spirl-controller-webhook