[BUG] Incomplete Azure Policy add-on (gatekeeper) cleanup

[weisdd]

Describe the bug

While migrating from Azure Policy to the upstream gatekeeper, I discovered that two resources are not cleaned up when the Azure Policy add-on gets disabled, namely:

• clusterrole gatekeeper-manager-role;
• clusterrolebinding gatekeeper-manager-rolebinding;

To Reproduce
Steps to reproduce the behavior:

1. Deploy an AKS cluster with Azure Policy add-on enabled;
2. Disable the add-on;
3. Run:

kubectl get clusterrole gatekeeper-manager-role
kubectl get clusterrolebinding gatekeeper-manager-rolebinding

Expected behavior
All resources are cleaned up.

Environment (please complete the following information):

• CLI Version: 2.46.0
• Kubernetes version: 1.25.5

[charleswool]

This issued has been logged and is on the backlog, we will be happy to reach out for update when we have them.