This topic tells you how to uninstall IPsec for VMware Tanzu from your deployment, and how to verify it has uninstalled.
To uninstall the IPsec Add-on, complete the following steps:
When uninstalling IPsec, the optional
flag must be set to true
in the runtime config of the current deployment before the properties can be removed. If your flag is already set this way, you can continue with the uninstallation with the procedure Remove IPsec Properties below.
To set the optional
flag to true
, do the following:
Retrieve the latest runtime config by running the following command:
bosh -e my-env runtime-config > PATH-TO-SAVE-THE-RUNTIME-CONFIG
Where PATH-TO-SAVE-THE-RUNTIME-CONFIG
is the location that you want to save the runtime configuration.
For example:
$ bosh -e my-env runtime-config > /runtime/config/
In the runtime config, set the optional
flag to true
under IPsec properties.
Update the runtime config by running the following command:
bosh -e my-env update-runtime-config --name=ipsec PATH-TO-SAVE-THE-RUNTIME-CONFIG
Where PATH-TO-SAVE-THE-RUNTIME-CONFIG
is the location of the runtime configuration you are updating.
For example:
$ bosh -e my-env update-runtime-config --name=ipsec /runtime/config/
Go to your Installation Dashboard in Tanzu Operations Manager.
If you are using Tanzu Operations Manager v2.3 or later, click Review Pending Changes. For more information about this Tanzu Operations Manager page, see Reviewing your pending product changes in Tanzu Operations Manager.
Click Apply Changes.
Wait for the installation to complete.
After your optional
flag is set to true
in your runtime config, then you can remove the IPsec properties.
To do this, follow the steps below:
Retrieve the latest runtime config by running the following command:
bosh -e my-env runtime-config > PATH-TO-SAVE-THE-RUNTIME-CONFIG
Where PATH-TO-SAVE-THE-RUNTIME-CONFIG
is the location that you want to save the runtime configuration.
For example:
$ bosh -e my-env runtime-config > /runtime/config/
In the runtime config, remove all IPsec properties under the releases:
and addons:
sections.
Update the runtime config by running the following command:
bosh -e my-env update-runtime-config --name=ipsec PATH-TO-SAVE-THE-RUNTIME-CONFIG
Where PATH-TO-SAVE-THE-RUNTIME-CONFIG
is the location of the runtime configuration you are updating.
For example:
$ bosh -e my-env update-runtime-config --name=ipsec /runtime/config/
Go to your Installation Dashboard in Tanzu Operations Manager.
If you are using Tanzu Operations Manager v2.3 or later, click Review Pending Changes. For more information about this Tanzu Operations Manager page, see Reviewing your pending product changes in Tanzu Operations Manager
To verify the uninstallation of IPsec is successful, follow the steps below:
Use bosh ssh
to SSH into one of the VMs in your deployment. For more information, see BOSH SSH.
Run monit summary
. If IPsec has uninstalled successfully, it does not show the ipsec
process.