From 32c8d93425d8b0804be0a3eeb85a5a80e19693ee Mon Sep 17 00:00:00 2001
From: actions <actions@github.com>
Date: Mon, 15 Mar 2021 17:15:15 +0000
Subject: [PATCH] Merge pull request #1033 from
 aiyengar2/fork_rancher_wins_upgrader

Fork rancher-wins-upgrader
---
 .../rancher-wins-upgrader-0.0.100-rc00.tgz    | Bin 0 -> 5734 bytes
 .../0.0.100-rc00/.helmignore                  |  23 ++++++
 .../0.0.100-rc00/Chart.yaml                   |  15 ++++
 .../0.0.100-rc00/README.md                    |  41 ++++++++++
 .../0.0.100-rc00/app-readme.md                |  19 +++++
 .../0.0.100-rc00/scripts/noop.ps1             |   4 +
 .../0.0.100-rc00/scripts/upgrade.ps1          |  67 +++++++++++++++++
 .../0.0.100-rc00/templates/_helpers.tpl       |  50 +++++++++++++
 .../0.0.100-rc00/templates/configmap.yaml     |  16 ++++
 .../0.0.100-rc00/templates/daemonset.yaml     |  70 ++++++++++++++++++
 .../0.0.100-rc00/templates/rbac.yaml          |  70 ++++++++++++++++++
 .../0.0.100-rc00/values.yaml                  |  62 ++++++++++++++++
 index.yaml                                    |  20 +++++
 13 files changed, 457 insertions(+)
 create mode 100755 assets/rancher-wins-upgrader/rancher-wins-upgrader-0.0.100-rc00.tgz
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/.helmignore
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/Chart.yaml
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/README.md
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/app-readme.md
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/scripts/noop.ps1
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/scripts/upgrade.ps1
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/_helpers.tpl
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/configmap.yaml
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/daemonset.yaml
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/rbac.yaml
 create mode 100755 charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/values.yaml

diff --git a/assets/rancher-wins-upgrader/rancher-wins-upgrader-0.0.100-rc00.tgz b/assets/rancher-wins-upgrader/rancher-wins-upgrader-0.0.100-rc00.tgz
new file mode 100755
index 0000000000000000000000000000000000000000..1696a459f8b4b0dad3e707711a4d8641f82d343b
GIT binary patch
literal 5734
zcmV-s7MbZEiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PK8iQyV+7@cHa2{zE?wPXT9{v4I56dM~v%8*&nA^Fl##Qd=Pv
z%QJ0T8;vwa(%5(t?r*=<l4d+(><~ycx#wQy1K1j=)vbO}cS~)}WHLq_O}R8tk&iS>
zQFk7VnYQtaW#XrA@N~P~?*9Gz?ti!2UHsoY*xmhU=YDs0?_g)Id%ycrcjv+0!QM~M
z{T7p7_Y}r5{Zsd==UOE05ArZ6m1UMIX?iVygjpukC{CEQ0%NW^%Jg8$WvZs8_CAOW
zbx2TKKIEA8Aha&;Cs~FjX9@PeL-#UgX2xQ+e27MY%wR-AE9gy8ZLysHhT3o?dobB;
zu{^K7cH^D6+e*<Sn&;LvJ!g`Q(10J#<p}H;i9Q1c^#nCc{Age@g+$3A9~IiI53ocl
zV}J?K0#HMksY1gWzce6Kil&t@E-m8{wdu7Yz>IOx1EwcjrZJzP95MZ$rZ5;MifHzP
zvG8WM^*KWAET_JCE_mV)YE9;ZcH^CHH_}PB+qxP5m+Sw8i2}{HG62`;|AXEA?xOzh
z@7?MDcX{r?5e``)EO?&7Q0ck=l5j_Okt=Oc$7`*7@M_Era03kf@$mVxXsC3?ti=?D
zT%hZ5go$7pVZt<L1Azvtf&oI#jKLJRw8|@w#Vi-hqKVg9H1JVf->7LM)PRZJnl}$t
zp!*2mjYh!y6i3`xJ?lZc?cflOG@BiR9Wx8L#v#8zr@EEmI-Sq8O3;`SX2)h53Xh#L
z2_<T7J&+~iU<?TSTFXPEVLeEC=jUPCml8o~$dtyW?eNRGXlnebIE}`%W?l$K>g#L@
z3>cxMWYu(r0u!sWGf`FvEa%9zn(!1;k0Z_G7u59DT2Zhysb4c%MxL=zxuEyp)yt!o
zo0TQn>Vd{wu!JzSV_?#E_Y3;Z!dN1ZOr3Egc_<olWw=$uiy%Xt`CH3IJ(xJ7>=^2B
z>%k}gHpM|P>cNl+gT6&@V^LO+-p?WBT3yVVFW$R0|9U#+7N2or198ycbJYkC!N-pf
z|K^R|oTqSki8eV8;Li#CdEGw7c!6IEWKo5#G~5VS#%q9TUv2{ALoq-t(V{sYaOu8A
zZt=bnh(LQ22y(>bh5!4d!&GkFY(v4MM3L6VISNjcwoU&2`QXp{{(InE^)^!}_F&3v
zGUjqrwwB+$YTrmYN^I`I-)5znZ9{*)QVZTxpG-x6fR@Fd=`-a*kd@#v5rxxjXc&PW
ze7y9t9uF%6uuZnYV8b|+fXK+j@Y0S^Pr1Qu;I_op+3EgU_^5IkM!+9maAVCSyzA2>
zHF!OE`z~0$=gj<GAT2I!3qLC<W<NuQOj=;HO^jLcfgm#>)RgAe2Bu>Lv_&L^)+nu*
zfuEB+G9@doDiMXT)Zdw%RJr-2vS5mwB;T9Uz*+;F7>{DGV`Y$xKr)6go1h!uY=W~W
z>Ft$%%grCm_CU}ALpG=0x?N``6ib7>r=3z7%Y;A;g-nr*wxYFfAQa5ghH*wZ_V)YU
zJvedhFKA?`1AhAW;nDNQahAdWhqTF9J##*+0+b#hno{L9c(B{Rhvf#d4Jb{ag9)Fh
z0(h2T%9%wmE7#ByNI((_0lo2`lNkGH(nDva9aATYr@-V43dyBKNmDaH*4^Om1<Iu2
z%aC#5=2zvSIHHv1BQBY6Q-_t9<LKqcs`+}ATj5w4yHzdKt7k{2J$P*p{6GzADnWDe
zA%>@@kyw^$Hd4~WaaiFwUCt^5+G=~yJ$N&o!8GIVOGEot-&}7Zp?7phQR)3M?s}Rs
zHghfln>n!@Am~EYN!kX(WfG?6mY_SxNFGCqxll9mQoM(-peN2P6GlN{NGwjY%FvFn
zFp+m6%I=wxv`bST&ze&&_3(WD;<ueGkHf>cL*ga(Gc=NqrAc6aFSy3E@_PPW8Mq2n
ztAffqQkn6N)U~_ZkM@`Uw>`__zsfQ1ydR^;QJdK2w+;obiU0O?c6S!yzk`GQ-Mjej
zdp!3_-KWj`<Hv}!n@fbY53$|{Wq+?jkky9h^3wO@!)hD#aax%*S{j|r$K{$!JB0TC
zH=XwFAfQZ_e4z;P2};zom(aV;&ugtm8YzlnmDL&+Ld@Xzf(e(jqTR9Fb>Gm2TFAr=
zu&}@9HbDaeOjuzMjLI6OjE2FGqe#8k6FlQ&46X88=;mPNtl!a#GwMrL)#R9L#cQqO
zA%x_Xhf)Poe%p0z+%}vx?@ST;CB78pCMwI7L}`tWT&tZs352I94_mTEqY6#?vD=C8
zB6k7g7(pmGLQ{@O{q)AtK48K;Wf%9#jUS;k)d-f-8pssz!fFP42M!CCkn^?;MwJUo
zeu){YLXZms`+L#egTvkZc&+twr{rfTfMk(g2ZI#Tv_bS5mg<TKd=`RBKh`9;l!^G%
z^CEsxcB<sE8uoI6TJsc_3f{_D1sk9+VagA`n26=Miz}-9!ZJEzpzc9Hd>B&4(7g@5
zzV5+1diZj@=*v@OEP1}wf-LijKUH~v_WAkwc^lfDws(~~%?SS{GtVQ2t2k7?L;HDQ
zY#Gu7T~oTkvF4OAL$)ZmZ|xO5t`b6j8m*qVPmppAH(_!;9&6f1gV_Z2BbDW3AKL%1
z6Yt!Qx^0Lbv78OK;FhC_$)tp&b^L_e@X-VMe0&&iBwyT1*fkwj*v*xc)dIdiSOkl~
z;R3WDy`kMbH+rt~|9qA%WBFGc23&jow{ySg|Lt~n5ANUjf8XOF-PKHv<~v?3Z|tmK
z<A7~vt@VM+v=>tK&so0K%FwcuS>}RhpJl#ogIkBo%ZN4{S#D>3WH=xE{P3`guZMAd
zi*<uSl5E8uybhm0a+#vEaNiBCu&#2^5x7mr<^p2h=!P{$Rk_4CH#;=O4Ox$W<pNFo
z1TD1viKFS%I<~KZkxJ#)!zg=Q0T4ye-1gqq^j@d`DZ@-jgI{wS;JWj_orAqa{omWU
z)Bo@C+)V#jo}13x2pl=#I79nYM&L_5z8Ye0-<6*7k2N3^&N+%rnU41d2^q7=_}OjX
z?gykw^h<#C<#mT+w*mf301i+gPS3)5!YYVOH}@*sGAGbDqYPfXRsUd_Sa?_2vtJtS
zb{$sz1f#@#;T(dtk$SgJ<z&n7bFT7gK+6elc)`o*F7ftY4eAL`@L`guLfRK!tPSP(
zkPSdRKg=r6Z)rD}A8`32+$QXmi5r^X*6QYFisuKsZMf0|mzTX;!?$cyfwXK?TMSx`
zEMsJE-nR3p8Mn8g9S!Mk((7E=CEv}*O_V4yd`>)Qo(lS<47*(vK+HP;WHhEc-mm5;
zdvM9^qtz^0NKkwYuU4(`S1eTBCHeBTax~>U#}%t|ejcCG>+`FJ^^0Iuuk%<L+qs%q
z_-1?qKsi}L+|$R;p1(hR{M+%_@yi$QU%Y<)x5uY-sP1Nr<J@|chdIRwcTxH$_`OgT
z>sD)hNd_WhCmQT3=YMnj;_UtFlP9MSj~>52dHCw-s>zooHkO+p&(9UY*<|E6<Y0RB
zY4hvZx}2#sXg6Gra?+J{cvb3XeF2QWDR;!R+h%4jwNC;s-2uLE+S^Xn;K{WDoRmRT
zgB7<8sjkEafge)YmChb@88R-Q{m9)6txjrvQn`=<jR9tXw7`Or<wYmp^ZQ4@<+2Id
z3!?g?UEjOs3*tXLV9D3s1HJD2?_h87{`bM|{k!|0-{q-CcaGPruw$k9zns4tfB3~^
zl52S%e|&$c1l}s>i*FgM#WxMs;w!<LE(H3kkSym<v?_AbgSQ*G5<Ho0IA5qbBJ(d&
zgGr&eow+_7jqf!<Jup3Io8N8}2AgBu8B!14u8yO^Ld-pfcfnYH1vCD}W$Ny+{lR#m
z1fJs1AzO0gGqh8;C31K(LQOIFCnna5f`@k22-yDpE4M!1pqHmt7ZLhnarFveUdK9<
zodH@_5qYB0v!GxnuEQUV&MJ$NYd+xuM~&NK<O#n(J5~C_LhJF#qlK1}<D*)OF62Y=
z+F+SZBFoi-jZ<oVC}$f!<MfQn;^K2XiaZyXp|nf{bJyrh;kg^I5t^ACH6n(L%N}&+
zu4u+Cda(cC!QKOE8yc^z-x8)qmcEo?cB+(hsc;t`*H)$()<m#jFwtl?s_$j^;ac2{
zQ%p<e-4BbLzklM6xK~Cv3-?=AMlMZYH;!E5Wr?X9z+4LHMyCPG{l9pOBI6^e^tZTh
zcis8lgZ=wg>VLX-`Ty_o+=CNlEo$j5e|wh0bc_-P1sASDE@#OHHgZKeq53D>zBXXS
zC<Kgz8u*kqm!oaaD46AwP=PaVXEG%S5=Z_X&}OL1N&PM3|F;zb>AnjpbB`3{s6lXv
z@mecBI(vU+l}2AFlx0f7Z;#F(<=U*Z;t{tU|IZV#)`|!J(jEV=Y8sC^?r+s#CbCll
zIAF<#B6p=sX07#eY^FK=8?X=b&t~qM(tNbm`uV?T+;2>CRTwxvdQ4d4T9I$D){1$G
ztP=)l_0P3dJTZw%vGYIcio|mLuP&N@lR2)@|AYJ8Mg6~ju(xxk|KH=O?tj7?E)Be{
z($;IOht(^e{BgJb#!RLH4SYb%zpQ+=ENpYPCpVR*U3sg#QQjz@1sb>Pt~i%qW-^K4
z*g~q@1x9XQFe67v5*7>$&vJp_Q)*<&%6naQ>~B}PE0ST>{`q35N1x1y&)|7$<cjTZ
zDrWAe%wH8P>5-`?*;m9(ICCbeEc~kuMGe`r1OYEFDQu|9DKT_6I~~$9Faj}$q0%^U
zHI}ZR;i;O|XeB4|ubwFte4?g#6ak6KIr?&hDj65B-ZW%8U2cxeZ*Oe*YRsz(a_)!q
z9ksfU2KtWXL~zJ;;;I&+$XWQ0^f$7~*^o<!BBn<MJ{I|9f19=vjnI$JL#57JCtvUS
zzJm0LB0NW$WnQ}6L=`hn)D*SfVoJVJr=fC}SeYynsU=$nTrxfLmu17%+kV}?^~-~~
zg<8u-AvZaYz8=+=luX_2ThH*#MDQ&VuACVYngR~4*|&I2pp^xsQ(x*(<S7Ls%?`Dy
z5Bi*9#$;OZKLohYffp)8IQ6G$<jot097)Af6j@MCS7~HXrvCnMd1u&Z)MAy0FGNAK
zUQ&jN++?TBQ&k?{xrtna{ID7yf>KDBAP;z9ZMmscbCrszq%WSWuWqP0DP_XwiMxdD
zCCVRxq5cb;S*C4N&KbFjugw{it_fBj#>~I~Q7%^0Y<YsYshNvqCQA)Nb?TpDqWe{8
z*@6O<Vs(X{4YRluCDMdZ|JK!JeP@Zdgnm`f8rKS0`|esbQ5I~K$F`&<Vbaw+q2LqL
zP88g|biXDfLdRZfN~xHs!rfvI8GmowtLx-SdW}sAV^!7^r74?V1Se~F`uE2>-ilU|
z6Uy~M@U-n!&Kv!39h?aY{$@@ty;yQ>Y+W4x;_(UnU1gtRH%n80J3e=a4&kjc21;3D
zHOt*LRn}k)Y5z&9AAYEBKYoE6Vvc}7;=9eUwYlkaIwNk!#UM^pRvl25{|7=1IvJz>
zo!~Ba!p+-Gg-D#6oh_%{Pt}x6{WheSqs!Zs^4jQJ@v>TFCxgyACvKU%ARE}UUjgmy
zP&<|@W4Nyj43c6nQDoES3rqc^B9mZYhBk(pbbPkA+tD;Su_4>x3lELoeiJ1V?ke`l
zp524zOcqSQYi9{76Bdf+sC$-q^TqO9D^fCImNT5RKv#|QHVg_&WCr9sq{4WME7Zty
zlvaAyG(gTEkE)u@nwH1#a7c13)M(_{LJ$ZUUz<nE?zV1;-q5BBGDn!Jp>#%m5hT%C
zF9}|FPfH+F;<Sg9J?X97j6KDKL*jIRHm0Tp&*xiaxD4RJx)i15!&z{Kd^?3z!1Sna
zroQpx44>IKH~Udkx(12T8cnWbY9NdXBsssJZi0Jjt$x2h$8N2)`2=nBh-b%SZpck~
z!{y%Y`^w(`$^|iE!`b~qXxGtcZ*0Y60_mLtOiS#1twfRMV3DFwa_mcycR;Tqaq2rQ
z>@v-{;1ir#m6v_0`R>(ApIs^CmsX!{Rni|Sb^pC((@SfhzhYa8;n?|1kP9ZAE}2H*
z@iyeXvgr%zjjz-i_g57gdrve+JybfYs;K*8a)AP{{<keizHu>f9PH*Y8eZuF``b-&
zh48$Y8wA10z=nXqd)!Trpe!%<wd77u8@ECFUiIcb1c1XKCYDcV&8_CihjQ!d*Ib~!
zSNqaEs`=7P*s&@`V=}Yk&G?#SlyzB(eNsrH;68?PCW$3>zUS24Ef>@foDTUY^dVJ_
zUlY`P7=GKR+7CS%b>rk=ang2PhJ%`Pg@NbD5GG9U6p}F}A54*%1~9_0ij9c#HvZ8u
z_>X*+=YLq9N92xW_$_ik*Pj0$94zF2_Pe{?yZq1hc<%B)cln>Y{Lfwf=Pv(qm;d>0
z`5#~|$oBa9C3iqV#d`{yJjVI2((J|$;)6eJ{a?=-9lNW$Rdi(#7k(6KSZ+aF`d?)X
zj`UbfebRtTrm4qV@e2QMv8v+he2nYP|989li~iq(y}RFk`7Y1;W382bn2@ZTXdI%Z
z2pJAx<IJjj!~d$vS=~ViKTrj1?ul%eGTq|uaY0rX_uEzv#gxs=T5CGy0ylTI;A3gl
z9mL4M-hQ_WcUQrG*z<Y)uN4b@#T?h@|9$$rc>lY5r~lvO`2zhP7Sg>2U)d5>wJvL|
zkKy-N8F}!V^ILsyT?<;&o6ng{nTx9qVcli&w!yhWziO48@Elzp`ViKwE^zA|y!F33
z^lqJe91qduOX&k2!saV9HgYbM|Lgi~!N*#m-4He-sqBir{`0F@j!;ETTMYo<eh@bi
z$h;G2$n|ug&X5ai_B+K)O)xsPm_c-kNudow^ecrZ%}HzP49EVO)hBpa*yu$e#2n^j
zNvpd(iMG(vf3IG=z-gE+%tBurITd3XGuLOiZ1D4yX3`8%N549<ZpzF>hMnnT`{tvL
zjJ=-Ajy!>ESW<RGZhehq>#4C%nIUiS5T2lQBvC_cK&`jY$!B|?>7*%7bNI3EhridL
zxV9@IROepcV1tqCvJe6e;gQN`O^#MbKy-x0a_L<;PlOxqa6&ohU8x<c&{(hC7Igp*
zVfl!))}_CGx_V%H*`d^8ywY~K)khz3THv!>@TM9rOwb%eypaCT=h~4FJwrC61zEIB
zO9mWqz1C{TJVdm{L|ky`s~_@hLv&>95=>XlL{KQQy0T8~rITKzgyvfb<b2r*Er(1n
z!u}nSIPL3zhi*ijo9AU=;SkETSd#NOyo$cd`W&{493t;bxbOXq^0@GDffZ$fX~RwX
zMsthNQ&q0{%feP-USbrvtEAA5e+Hc=fMig6kWdhI2(KlZFfQDW;HGF2I0Q>;<HAk~
zcZ4!rj@p%a)Mjj-6$!<8{-*(hM5k@v4==cdZmA;<p=Zq4#~0i_qNyW^&|M1k)agH_
z9z<hQ9d_fzqAsq6*Y$_NDNo&DipB)_1OYE{Oehdnh0O~KL#;BXk|gzccbvNZX#eBx
YxqI%OANTxs00030|J!QOy8vnc0FJ7QxBvhE

literal 0
HcmV?d00001

diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/.helmignore b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/.helmignore
new file mode 100755
index 000000000..f82e96d46
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/Chart.yaml b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/Chart.yaml
new file mode 100755
index 000000000..8e713cb67
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/Chart.yaml
@@ -0,0 +1,15 @@
+annotations:
+  catalog.cattle.io/os: windows
+  catalog.rancher.io/certified: rancher
+  catalog.rancher.io/namespace: cattle-wins-system
+  catalog.rancher.io/release-name: rancher-wins-upgrader
+apiVersion: v2
+appVersion: 0.1.0
+description: Manages upgrading the wins server version and configuration across all
+  of your Windows nodes
+maintainers:
+- email: arvind.iyengar@suse.com
+  name: aiyengar2
+name: rancher-wins-upgrader
+type: application
+version: 0.0.100-rc00
diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/README.md b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/README.md
new file mode 100755
index 000000000..462aa3629
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/README.md
@@ -0,0 +1,41 @@
+# Rancher Wins Upgrader
+
+A Rancher chart that handles keeping the wins server version and config across some (or all) of the Windows nodes on a Kubernetes cluster in sync. It does this by running a simple script to replace the contents of the `\etc\rancher\wins` directory with the newly specified config and wins image via one or more DaemonSets. Once executed, the script will simply sleep forever.
+
+## How does this work?
+
+A DaemonSet of initContainers copies the provided config (stored in a ConfigMap) into `\etc\rancher\wins\config` and runs `wins cli prc run --path {path-to-wins} --args {up}`, where `.\wins up[grade]` is a Go program that runs a simple Powershell script that forces an upgrade of the binary used by the `rancher-wins` service across all of your Windows hosts.
+
+TLDR: we use wins (cli) to pass wins (upgrade) to wins (server) in order to update wins (server) on the host on demand.
+
+## Cluster / Node Requirements
+
+This Helm chart is intended to be used on a Windows cluster that meets the following two requirements:
+- A Windows Service called `rancher-wins` is currently running on each Windows host (e.g. `.\wins srv app run --register; Start-Service -Name rancher-wins` or `.\wins up` has been run on the host) that is running a wins server version of v0.1.0+.
+- The wins config used by each Windows host's `rancher-wins` Service has `{{ .Values.prefixPath }}etc\rancher\wins\wins-upgrade.exe` within `whiteList.processPath` so that the new wins version can be delivered onto the host
+
+If the cluster you are installing this chart on is a custom cluster that was created via RKE1 with Windows Support enabled, your nodes should already meet the first requirement; this should have been added as part of [the bootstrapping process for adding the Windows node onto your RKE1 cluster](https://github.com/rancher/rancher/blob/master/package/windows/bootstrap.ps1).
+
+However, depending on the bootstrap.ps1 version that was used when you spun up your Windows cluster, it is possible that the second requirement is not met yet. 
+
+If the second requirement is not met, there are two options to reconcile:
+
+### Manual Update
+
+This is the recommended approach for updating your Windows hosts, but it requires the user to log onto every Windows host to upgrade the wins config. After logging onto each host, you will need to do manually update the wins config.
+
+By default, the wins config is located in `c:\etc\rancher\wins\config`, but you could use the following powershell command to identify the command line arguments passed into the `rancher-wins` service (`--config` corresponds to the config path on the host):
+```powershell
+(Get-CimInstance Win32_Service -Filter 'Name = "rancher-wins"').PathName
+```
+
+Once complete, restart the service:
+```powershell
+Restart-Service -Name "rancher-wins" | Stop-Service
+```
+
+### Masquerading (Use at your own risk. Here be dragons...)
+
+This option is *only* meant as a hack to allow users who are currently operating on Windows clusters that have not whitelisted `{{ .Values.prefixPath }}etc\rancher\wins\wins-upgrade.exe`. If you plan to use this option, please ensure that you immediately upgrade this chart with `masquerade.enabled=false` and perform another `helm upgrade` to avoid any unintentional consequences (e.g. failure to install the original process that you meant to whitelist on the host).
+
+If `masquerade.enabled=True`, this chart will have the wins client execute `wins-upgrade.exe` payload under the `masquerade.as` path provided, effectively tricking the `wins server` into running the binary although it has not been whitelisted. This relies on the fact that the wins server does not / cannot do any verification on the binary passed into wins since it does track a list of valid checksums on the binaries provided to it.
\ No newline at end of file
diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/app-readme.md b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/app-readme.md
new file mode 100755
index 000000000..f520eb331
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/app-readme.md
@@ -0,0 +1,19 @@
+# Rancher Wins Upgrader
+
+A Rancher chart that handles keeping the wins server version and config across some (or all) of the Windows nodes on a Kubernetes cluster in sync. It does this by running a simple script to replace the contents of the `\etc\rancher\wins` directory with the newly specified config and wins image via one or more DaemonSets. Once executed, the script will simply sleep forever.
+
+## How does this work?
+
+A DaemonSet of initContainers copies the provided config (stored in a ConfigMap) into `\etc\rancher\wins\config` and runs `wins cli prc run --path {path-to-wins} --args {up}`, where `.\wins up[grade]` is a Go program that runs a simple Powershell script that forces an upgrade of the binary used by the `rancher-wins` service across all of your Windows hosts.
+
+TLDR: we use wins (cli) to pass wins (upgrade) to wins (server) in order to update wins (server) on the host on demand.
+
+## Cluster / Node Requirements
+
+This Helm chart is intended to be used on a Windows cluster that meets the following two requirements:
+- A Windows Service called `rancher-wins` is currently running on each Windows host (e.g. `.\wins srv app run --register; Start-Service -Name rancher-wins` or `.\wins up` has been run on the host) that is running a wins server version of v0.1.0+.
+- The wins config used by each Windows host's `rancher-wins` Service has `{{ .Values.prefixPath }}etc\rancher\wins\wins-upgrade.exe` within `whiteList.processPath` so that the new wins version can be delivered onto the host
+
+If the cluster you are installing this chart on is a custom cluster that was created via RKE1 with Windows Support enabled after wins v0.1.0+ was released (i.e. Rancher 2.5.7+), your nodes should already meet the first requirement; this should have been added as part of [the bootstrapping process for adding the Windows node onto your RKE1 cluster](https://github.com/rancher/rancher/blob/master/package/windows/bootstrap.ps1).
+
+If not, please see the README.md for more information on how you can use this chart.
\ No newline at end of file
diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/scripts/noop.ps1 b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/scripts/noop.ps1
new file mode 100755
index 000000000..324c64195
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/scripts/noop.ps1
@@ -0,0 +1,4 @@
+$ErrorActionPreference = 'Stop'
+
+# Sleep forever, since a DaemonSet's restartPolicy must be Always
+while(1) { Start-Sleep -s 3600 }
\ No newline at end of file
diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/scripts/upgrade.ps1 b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/scripts/upgrade.ps1
new file mode 100755
index 000000000..2e576225d
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/scripts/upgrade.ps1
@@ -0,0 +1,67 @@
+$ErrorActionPreference = 'Stop'
+
+function Create-Directory
+{
+    param (
+        [parameter(Mandatory = $false, ValueFromPipeline = $true)] [string]$Path
+    )
+
+    if (Test-Path -Path $Path) {
+        if (-not (Test-Path -Path $Path -PathType Container)) {
+            # clean the same path file
+            Remove-Item -Recurse -Force -Path $Path -ErrorAction Ignore | Out-Null
+        }
+
+        return
+    }
+
+    New-Item -Force -ItemType Directory -Path $Path | Out-Null
+}
+
+function Transfer-File
+{
+    param (
+        [parameter(Mandatory = $true)] [string]$Src,
+        [parameter(Mandatory = $true)] [string]$Dst
+    )
+
+    if (Test-Path -PathType leaf -Path $Dst) {
+        $dstHasher = Get-FileHash -Path $Dst
+        $srcHasher = Get-FileHash -Path $Src
+        if ($dstHasher.Hash -eq $srcHasher.Hash) {
+            return
+        }
+    }
+
+    $null = Copy-Item -Force -Path $Src -Destination $Dst
+}
+
+if ($env:WINS_UPGRADE_PATH) {
+    $winsUpgradePath = $env:WINS_UPGRADE_PATH
+} else {
+    $winsUpgradePath = "c:\etc\rancher\wins\wins-upgrade.exe"
+}
+$winsUpgradeDir = Split-Path -Path $winsUpgradePath
+$winsUpgradeFilename = Split-Path -Path $winsUpgradePath -Leaf
+
+Create-Directory -Path $winsUpgradeDir
+Transfer-File -Src "c:\Windows\wins.exe" -Dst $winsUpgradePath
+
+Create-Directory -Path "c:\host\etc\rancher\wins"
+Transfer-File -Src $winsUpgradePath -Dst "c:\host\etc\rancher\wins\$winsUpgradeFilename"
+Transfer-File -Src "c:\scripts\config" -Dst "c:\host\etc\rancher\wins\config"
+
+$winsOut = wins.exe cli prc run --path=$winsUpgradePath --args="up --wins-args=`'--config=$winsUpgradeDir\config`'"
+
+Write-Host $winsOut
+
+if ($winsOut -match ".* rpc error: code = Unavailable desc = transport is closing") {
+    Write-Host "Successfully upgraded"
+    exit 0
+} elseif ($LastExitCode -ne 0) {
+    Write-Host "Returned exit $LastExitCode"
+    exit $LastExitCode
+} else {
+    Write-Host "Returned exit 0, but did not receive expected output from .\wins up"
+    exit 1
+}
diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/_helpers.tpl b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/_helpers.tpl
new file mode 100755
index 000000000..acf49633d
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/_helpers.tpl
@@ -0,0 +1,50 @@
+# Rancher
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- end -}}
+{{- end -}}
+
+# General
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+The components in this chart create additional resources that expand the longest created name strings.
+The longest name that gets created adds and extra 37 characters, so truncation should be 63-35=26.
+*/}}
+{{- define "winsUpgrader.name" -}}
+wins-upgrader
+{{- end -}}
+
+{{- define "winsUpgrader.namespace" -}}
+{{- default .Release.Namespace .Values.namespaceOverride -}}
+{{- end -}}
+
+{{- define "winsUpgrader.labels" -}}
+k8s-app: {{ template "winsUpgrader.name" . }}
+release: {{ .Release.Name }}
+provider: kubernetes
+{{- end -}}
+
+{{- define "winsUpgrader.winsHostPath" -}}
+{{ .Values.prefixPath | replace "\\\\" "/" }}etc/rancher/wins
+{{- end -}}
+
+{{- define "winsUpgrader.winsMasqueradeHostPath" -}}
+{{ required "Must provide name for .Values.masquerade.as if enabled" .Values.masquerade.as | replace "\\\\" "\\" | replace "\\" "/" | dir }}
+{{- end -}}
+
+{{- define "winsUpgrader.nodeSelector" -}}
+{{- if semverCompare "<1.14-0" .Capabilities.KubeVersion.GitVersion -}}
+beta.kubernetes.io/os: windows
+{{- else -}}
+kubernetes.io/os: windows
+{{- end -}}
+{{- end -}}
+
+{{- define "winsUpgrader.tolerations" -}}
+- operator: Exists
+{{- end -}}
diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/configmap.yaml b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/configmap.yaml
new file mode 100755
index 000000000..8b24d1b5d
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/configmap.yaml
@@ -0,0 +1,16 @@
+{{- range .Values.winsConfigs }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ template "winsUpgrader.name" $ }}-{{ .name }}
+  namespace: {{ template "winsUpgrader.namespace" $ }}
+  labels: {{ include "winsUpgrader.labels" $ | nindent 4 }}
+data:
+  config: |- 
+{{ tpl .config $ | indent 4 }}
+  upgrade.ps1: |-
+{{ $.Files.Get "scripts/upgrade.ps1" | indent 4 }}
+  noop.ps1: |-
+{{ $.Files.Get "scripts/noop.ps1" | indent 4 }}
+---
+{{- end }}
diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/daemonset.yaml b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/daemonset.yaml
new file mode 100755
index 000000000..6c19c2f29
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/daemonset.yaml
@@ -0,0 +1,70 @@
+{{- range .Values.winsConfigs }}
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: {{ template "winsUpgrader.name" $ }}-{{ required "Must provide name for .Values.winsConfigs[].name" .name }}
+  namespace: {{ template "winsUpgrader.namespace" $ }}
+  labels: {{ include "winsUpgrader.labels" $ | nindent 4 }}
+spec:
+  selector:
+    matchLabels: {{ include "winsUpgrader.labels" $ | nindent 6 }}
+  template:
+    metadata:
+      labels: {{ include "winsUpgrader.labels" $ | nindent 8 }}
+    spec:
+      nodeSelector: {{ include "winsUpgrader.nodeSelector" $ | nindent 8 }}
+{{- if .nodeSelector }}
+{{ toYaml .nodeSelector | indent 8 }}
+{{- end }}
+{{- if .tolerations }}
+      tolerations: {{ .tolerations | toYaml | nindent 8 }}
+{{- else }}
+      tolerations: {{ include "winsUpgrader.tolerations" $ | nindent 8 }}
+{{- end }}
+      serviceAccountName: {{ template "winsUpgrader.name" $ }}
+      containers:
+      - name: noop
+        image: {{ template "system_default_registry" $ }}{{ required "Must provide name for .Values.winsConfigs[].image.repository" .image.repository }}:{{ required "Must provide name for .Values.winsConfigs[].tag" .image.tag }}
+        command: ["pwsh", "-f", "c:/scripts/noop.ps1"]
+        volumeMounts:
+        - name: upgrade-scripts
+          mountPath: c:/scripts/
+      initContainers:
+      - name: wins-upgrader
+        image: {{ template "system_default_registry" $ }}{{ .image.repository }}:{{ .image.tag }}
+        command: ["pwsh", "-f", "c:/scripts/upgrade.ps1"]
+        volumeMounts:
+        - name: wins-pipe
+          mountPath: \\.\pipe\rancher_wins
+        - name: wins
+          mountPath: c:/host/etc/rancher/wins
+        - name: upgrade-scripts
+          mountPath: c:/scripts/
+        env:
+        - name: HELM_REVISION_NUMBER
+          value: {{ $.Release.Revision | quote }}
+{{- if $.Values.masquerade.enabled }}
+        - name: WINS_UPGRADE_PATH
+          value: {{ $.Values.masquerade.as }}
+{{- end }}
+      volumes:
+      - name: wins-pipe
+        hostPath:
+          path: \\.\pipe\rancher_wins
+      - name: wins
+        hostPath:
+{{- if $.Values.masquerade.enabled }}
+          path: {{ include "winsUpgrader.winsMasqueradeHostPath" $ }}
+          type: DirectoryOrCreate
+{{- else }}
+          path: {{ include "winsUpgrader.winsHostPath" $ }}
+          type: DirectoryOrCreate
+{{- end }}
+      - name: upgrade-scripts
+        configMap:
+          name: {{ template "winsUpgrader.name" $ }}-{{ .name }}
+---
+{{- end }}
+{{- if not .Values.winsConfigs }}
+{{- fail "Cannot install chart unless at least one config is provided in .Values.winsConfigs" }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/rbac.yaml b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/rbac.yaml
new file mode 100755
index 000000000..7d50909d7
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/templates/rbac.yaml
@@ -0,0 +1,70 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ template "winsUpgrader.name" . }}
+  namespace: {{ template "winsUpgrader.namespace" . }}
+  labels: {{ include "winsUpgrader.labels" . | nindent 4 }}
+rules:
+- apiGroups: ['policy']
+  resources: ['podsecuritypolicies']
+  verbs:     ['use']
+  resourceNames: [{{ include "winsUpgrader.name" . | quote }}]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ template "winsUpgrader.name" . }}
+  namespace: {{ template "winsUpgrader.namespace" . }}
+  labels: {{ include "winsUpgrader.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ template "winsUpgrader.name" . }}
+subjects:
+- kind: ServiceAccount
+  name: {{ template "winsUpgrader.name" . }}
+  namespace: {{ template "winsUpgrader.namespace" $ }}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ template "winsUpgrader.name" . }}
+  namespace: {{ template "winsUpgrader.namespace" . }}
+  labels: {{ include "winsUpgrader.labels" . | nindent 4 }}
+---
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+  name: {{ template "winsUpgrader.name" . }}
+  namespace: {{ template "winsUpgrader.namespace" . }}
+  labels: {{ include "winsUpgrader.labels" . | nindent 4 }}
+spec:
+  privileged: false
+  hostNetwork: false
+  hostIPC: false
+  hostPID: false
+  runAsUser:
+    rule: 'RunAsAny'
+  seLinux:
+    rule: 'RunAsAny'
+  supplementalGroups:
+    rule: 'MustRunAs'
+    ranges:
+      - min: 0
+        max: 65535
+  fsGroup:
+    rule: 'MustRunAs'
+    ranges:
+      - min: 0
+        max: 65535
+  readOnlyRootFilesystem: false
+  volumes:
+    - 'secret'
+    - 'hostPath'
+  allowedHostPaths:
+  - pathPrefix: \\.\pipe\rancher_wins
+{{- if .Values.masquerade.enabled }}
+  - pathPrefix: {{ include "winsUpgrader.winsMasqueradeHostPath" . }}
+{{- else }}
+  - pathPrefix: {{ include "winsUpgrader.winsHostPath" . }}
+{{- end }}
diff --git a/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/values.yaml b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/values.yaml
new file mode 100755
index 000000000..aa14899cf
--- /dev/null
+++ b/charts/rancher-wins-upgrader/rancher-wins-upgrader/0.0.100-rc00/values.yaml
@@ -0,0 +1,62 @@
+# Default values for rancher-windows-exporter.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+# Configuration
+
+global:
+  cattle:
+    systemDefaultRegistry: ""
+
+## The path that prefixes all of your wins processPaths, used in the template for each config
+##
+prefixPath: c:\\
+
+## One or more configurations for the wins server to be applied across all of the nodes based on the nodeSelector and tolerations provided
+##
+winsConfigs:
+- name: default
+  image:
+    # TODO(aiyengar2): replace with an image that just contains wins
+    repository: rancher/wins
+    tag: v0.1.0
+  config: |
+    debug: false
+    listen: rancher_wins
+    proxy: rancher_wins_proxy
+    whiteList:
+      processPaths:
+        - {{ .Values.prefixPath }}etc\rancher\wins\wins-upgrade.exe
+        - {{ .Values.prefixPath }}etc\windows-exporter\windows-exporter.exe
+        - {{ .Values.prefixPath }}etc\wmi-exporter\wmi-exporter.exe
+        - {{ .Values.prefixPath }}etc\kubernetes\bin\kube-proxy.exe
+        - {{ .Values.prefixPath }}etc\kubernetes\bin\kubelet.exe
+        - {{ .Values.prefixPath }}etc\nginx\nginx.exe
+        - {{ .Values.prefixPath }}opt\bin\flanneld.exe
+      proxyPorts:
+        - 9796
+    upgrade:
+      mode: watching
+      watchingPath: {{ .Values.prefixPath }}etc\rancher\wins\wins.exe
+  # By default, `kubernetes.io/os: windows` or `beta.kubernetes.io/os: windows` will be included
+  nodeSelector: {}
+  # If provided, these tolerations will be used. Otherwise, it defaults to `[ {operator: Exists} ]`
+  tolerations: []
+
+## Masquerade is *only* meant as a hack to allow users who are currently operating on Windows clusters that do
+## not support wins upgrades (e.g. those which have not whitelisted {{ .Values.prefixPath }}etc\rancher\wins\wins-upgrade.exe)
+## to be able to masquerade the payload for this installer under another whitelisted process's name.
+##
+## Please read the README.md before trying to enable this option and, if applied, ensure that you immediately upgrade
+## this chart with masquerade.enabled=false to avoid any unintentional consequences (e.g. failure to install the original
+## process that you meant to whitelist on the host)
+##
+## TLDR: Use at your own risk. Here be dragons...
+##
+masquerade:
+  enabled: false
+  # Why wmi_exporter?
+  # wmi_exporter is the only default whitelisted process that may or may not be run on the host, since
+  # it is only ever deployed if the Windows cluster is also using Prometheus-based Windows monitoring (e.g. Rancher Monitoring V1)
+  # All of the other default whitelisted processes are required for the Kubernetes cluster to operate
+  as: c:\\etc\wmi-exporter\wmi-exporter.exe
\ No newline at end of file
diff --git a/index.yaml b/index.yaml
index 899d34afe..df567c83e 100755
--- a/index.yaml
+++ b/index.yaml
@@ -5725,6 +5725,26 @@ entries:
     urls:
     - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta300.tgz
     version: 0.1.0-beta300
+  rancher-wins-upgrader:
+  - annotations:
+      catalog.cattle.io/os: windows
+      catalog.rancher.io/certified: rancher
+      catalog.rancher.io/namespace: cattle-wins-system
+      catalog.rancher.io/release-name: rancher-wins-upgrader
+    apiVersion: v2
+    appVersion: 0.1.0
+    created: "2021-03-15T17:15:15.620518014Z"
+    description: Manages upgrading the wins server version and configuration across
+      all of your Windows nodes
+    digest: 02c0c5e64d4bb535220c4a0027c30519663c94ac3b0c02062628073df8b8457f
+    maintainers:
+    - email: arvind.iyengar@suse.com
+      name: aiyengar2
+    name: rancher-wins-upgrader
+    type: application
+    urls:
+    - assets/rancher-wins-upgrader/rancher-wins-upgrader-0.0.100-rc00.tgz
+    version: 0.0.100-rc00
   rio:
   - annotations:
       catalog.cattle.io/certified: rancher