According to the docs. Once the CRD is removed, all instances of the CR are removed also. https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#delete-a-customresourcedefinition

So the question is, If the mobile security service api is not available for whatever reason, are we allowing the app CR to be deleted? Camila Macedo Laura Fitzgerald