From b2056617a4570088aece61b4f58fa1b1cee60117 Mon Sep 17 00:00:00 2001
From: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
Date: Wed, 11 Jan 2023 15:41:16 -0700
Subject: [PATCH 1/3] Bump rancher-webhook version to v0.3.2-rc9

---
 packages/rancher-webhook/package.yaml | 2 +-
 release.yaml                          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/rancher-webhook/package.yaml b/packages/rancher-webhook/package.yaml
index 9532812d5..2fe788cf8 100644
--- a/packages/rancher-webhook/package.yaml
+++ b/packages/rancher-webhook/package.yaml
@@ -1,2 +1,2 @@
-url: https://github.com/rancher/webhook/releases/download/v0.3.2-rc8/rancher-webhook-0.3.2-rc8.tgz
+url: https://github.com/rancher/webhook/releases/download/v0.3.2-rc9/rancher-webhook-0.3.2-rc9.tgz
 version: 2.0.2
diff --git a/release.yaml b/release.yaml
index 71aa91356..22e6e52db 100644
--- a/release.yaml
+++ b/release.yaml
@@ -55,7 +55,7 @@ rancher-gatekeeper-crd:
 rancher-logging:
   - 101.1.0+up3.17.10
 rancher-webhook:
-  - 2.0.2+up0.3.2-rc8
+  - 2.0.2+up0.3.2-rc9
 sriov:
   - 101.0.2+up0.1.0
 sriov-crd:

From 7a34e67c81132f0521cb720bfa094a0f8626ed63 Mon Sep 17 00:00:00 2001
From: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
Date: Wed, 11 Jan 2023 15:41:40 -0700
Subject: [PATCH 2/3] Make remove

---
 .../rancher-webhook-2.0.2+up0.3.2-rc8.tgz     | Bin 2718 -> 0 bytes
 .../2.0.2+up0.3.2-rc8/Chart.yaml              |  18 ------
 .../2.0.2+up0.3.2-rc8/charts/capi/Chart.yaml  |   4 --
 .../charts/capi/templates/service.yaml        |  13 ----
 .../2.0.2+up0.3.2-rc8/templates/_helpers.tpl  |  22 -------
 .../templates/deployment.yaml                 |  59 ------------------
 .../pre-delete-hook-cluster-role-binding.yaml |  19 ------
 .../pre-delete-hook-cluster-role.yaml         |  25 --------
 .../templates/pre-delete-hook-job.yaml        |  39 ------------
 .../templates/pre-delete-hook-psp.yaml        |  33 ----------
 .../pre-delete-hook-service-account.yaml      |  12 ----
 .../2.0.2+up0.3.2-rc8/templates/rbac.yaml     |  12 ----
 .../2.0.2+up0.3.2-rc8/templates/service.yaml  |  13 ----
 .../templates/serviceaccount.yaml             |   4 --
 .../2.0.2+up0.3.2-rc8/templates/webhook.yaml  |  19 ------
 .../2.0.2+up0.3.2-rc8/values.yaml             |  28 ---------
 index.yaml                                    |  22 -------
 17 files changed, 342 deletions(-)
 delete mode 100644 assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc8.tgz
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/Chart.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/charts/capi/Chart.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/charts/capi/templates/service.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/_helpers.tpl
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/deployment.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-cluster-role-binding.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-cluster-role.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-job.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-psp.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-service-account.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/rbac.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/service.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/serviceaccount.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/webhook.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc8/values.yaml

diff --git a/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc8.tgz b/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc8.tgz
deleted file mode 100644
index cf3cd8da1e4282402baa68dfff76e2bbfe284d7e..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2718
zcmV;P3SsphiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PI|CZ{s%d-`DyS0~LSdf4G$_%Z{@rTn|XI>D?Z7QzPm1a43oe
zEsbq96seMwx4AUm{UA}#mg8hM>un0n8z&Sw98sL#Ja8mQc(_LCe89z8i0jeWnn>;5
zkeI!AGV(mnn@y+rujhH)-|={S@?t!l9G^`5$!vV`!W&Qhng0U3rxRf}rAia|!u#a8
zx;OVsh;S}6(Nu61SO6i>go%|K60I4!RE$EDnl33u0Tg?sx7(UV5%K_REmO36yIiLW
zbT%jz6+D2WzkLm3cRX`F$AiDZ*!A;2k9vo45~E5;hyj>JN8Komac^g#0$`M<zxG~D
zP{vd%r|R|c1LcwUpn7|k>d_M0cTWnbefQOFp(QdT3Y|>&YVk@%vq(aJD4A}2izG?)
zujfu&-;v=fE5ZbMggm6E0?UC=@QCWXQ%Dl(A}0%mkp*BT$r>#HiHT5D3waZOZCeql
zP}0PV`++bT5l#8(G>WOpX8gAi36?^_r4bYKO@hkm7rj~x-}PMo&uLN%{H3?^K#!y@
z{%;6NQ9Z2z*oXh#WZcF7<MCv`|3eUs$qIuGW)z!Z)Kz={O;!PHYJCUD8O&40=7Q1i
zCV)4~3!&!{6>@D^D<&3%6{bbAd@2Bg-mh^<Ql>9)MU^hF3ScdizCis!$m;->gekPF
z4A-)e1>RNdaTvFnGvi}fiNx2)P~-NsLS7?9-z{fGD%32$Zf<t$`V)6zSzmz`45hJ^
zIaca5La{UuVZy{sj9j~Lg$Qe{6BUedev+d`m6?P{glZHD9%7=^NQG;RQbzg8!3_;F
z#v@HA*AC&4Q_nWaXN!eIpnNH;h8zL>_>;v&gjdKg)ItVuduLf+eFbw#g{1oCj1i?S
zNQ^*~qAQLOXwekcO1eGs2l1sh=0FFbF8*tb6Gk+u(fc*B1f_Cy@`<Kk5B_^6$9@O@
zXS3OO!2d(g?X3e5E-6Q_4JyBn3@pEw1uom*+}&AON4f;}2jd_ZTra)dUOcacC6aQz
z1pEKg$o?n>$P`xp*tI;!qpiQK<{fo*x68-^nKBGWl5D%SC8sW<JW_Bnpl#rC!N`GY
z%#2qv0?7<n?n(v4*sKAUOAK`Y_Jz1I(4R+2BFXq=&~2apk`iX`zMqB|ssMZ=L)*;M
z5m19u|MTCi{|yuIiQeEI{hv&Zryc!2nR?Sf{|`aUFq9;T8g0hbHRVwNudC;8#i&U{
zGzqFev#U2M!7#g8?n>ie#YBhex4F)l27q3z11Ps$F|ILRMy$nRCli2DjEp*f)r^-j
z^){V0f~7H5texWaG*i`N3PXvyp1f?i=vxS<9@&7BUV#b#Y`D91*Om`lIIg`sJFed?
zP#&^0+65IZ{05xz2)Tw=J0)u}g&bZ%i~o?A_4oJ<`Z=})ZTYM_<ZK~pQ`Ff`QJXG#
zucXZmm7ueG1Pukxd~lSFO@Vw<KmT%%Tz!A~Zr<1xCEVZMmUAmj;^gkm-Wqy-ar({M
z^Y>?`^EdZ0Xztm2_`ExNcQ2bbjPK)ear*B3YJPfl-evNw6mfIk11u@B=n|Lh)}nn*
z^g5_?*R67PRbLZ&!BO^<3VpxF>2Trh?)J8NkojP@4%y)DF4(%P$qMf7j;a~^!Kx)s
zGjz4L7<RfqbNvz_wc6endF0nvpK3$Rh13E3WjdW~jmaLgvuEI|larI`>Vv?ogtvDh
z<$aPiQ4S!^dYNZ9(s44nex)i@Qz$nmN7+vnt%fMIYRS@4p}bp&r(u|}?8V7`ZQhDR
zYo2{UYQ4j^uGY_~A>Eg@wZBK&?f)ebohVPEIQbq3S*kQjM+%0{g7S#+)x$i)z2`rE
zC;s!NzJEOUe}|wg4J=Y;O*Coxh;l(fm!x_vB>iu0SKaGZdC*Zgj%Q}0TndKYm~FD(
zfpqHKW>x-P%TL%9$~FCjslkiRnHGS(Mi#qjJ<3Mf0kkITTy{PnU9GhpfbH8omkX6h
za(iG0u)w8|rHV+*r+sNaGYvz;2qW|Fl2C?`m8nl*K}kaYE=8K$v#J)r)}lUS4OP1M
z8AAj5PQl`;1<Te>`{;C*r*Zg}*~d$BtmR&m&CrOz2b6tg^l|wAxQxI){6C&}9sKua
zzBl0iA?P9azl}f-wg}G?_{X0G_)~@j9+$wc0{9VZQl7&Xu}^aiZTP7;s!}4AA(|0!
zs`C^4Vo5^5mvog@p|csXLAfy9jpSWcIezEYixsX*7fjc#oc*#C&OR|#rDygP>a4Nc
zXlEoL3(BabsNB=}n_?d+_a8)oZB}=*881+i@n|lhD-6@jwKoBnZ60)2wBn)k3YdsU
z6+H586nlhB)&BMA*|O!06{hbQTEU0o|IcFak%{0v`0t-|>%V;OWT^i-3_aHWUl1Lx
zYhVALV)0mve~3HzyRih5C$a=pf_y>3Yq4Cur7_h3O!lU}ALOBb{Bl((+h*qc0r{J4
z2@adeF%1$k<<({S?mPZ1p)8d+B*zby9Ivy9dv^%bDPX&KlMl@R*Vwct7u@Y=vch&(
zjGaYGb-&VaI1^msuezP~mMK3~|57Le@LFlxI3^i3{s?waO=Q2UoUoT*I}Tm(3^2IR
z&Qhd2`Z_O~eYwxEd%43^`xLk1;r2gK$>*{E<7v14!ykLzkpDXf6_7!AbdL}4|DWo$
z|EcRnv_}-q#MZbWe5}LA(m*GYZYaZ5T?N@&GHDv$%+J~l^Ea>Sh8n<3;FB^8;OH`I
zJ>@q?`EmZ+%mVGco+b&y7`Y~_2*;XT-=#|D-OY)dBz)C8YmX@pU|d0GOnwbuc6>ZJ
zwg8sOq(+~JokS9S$Jx!L5c*rn(Ab=MDOz;^4jh>y{-fs@(LIhHj{k*M=oFFuBW%IG
z`oEdissHgO{>f1PeGqzV{8vSOozsLrauE1g@cegzEW7nT&+9(Pdm#Jte>&N!{~ZtK
zzlWg%ob5j4k!N`bMWUGU#wq8{GtONVKrH~;#-Bf|z3<X){V(kO6F|T|{h#=gt@{7t
zLH`dzEw$-d`u(ciQl$2)xmCbYmdQE!p8=EwaGJ;!>P}T$B83*AU;%u8HgD7@l*MuF
z0^{C7;4i(T&x-cy|Kr{LE!wC5V{g_y|M4fo`#%SvC-LnEm3y|dTmQ=d>+{?H%-C<e
z|2M?{2cg#cKlc=()FD9q0g2+f5ogU)irrvQpIKPN*2?|%YSK&GQ2bCPmW{)(85ch$
zO$-n+id>r+i&x1FR^5AE+PJpkD<Zk;VQSwu<5A;d2>GoFUUq3XFiUgRSe+o{XF68#
z(o@-b{!2<XgyD89(pU}vMI$`V-wsp(TnL`=(KJSp>MINdk5m9-?{mOxSO3E`ky?#H
zlF%pn7SKNZ_fEF_|LIWwaTvPyGc=y-S&a|NY}!}8wCDpp0o|wnPn8SU8~@L`^}l29
zcsA(&A?T6ufAfVfn!nn&m1O6Lkwfx##2O#NG6!n?-@?jYn(av!bl<1jojxeujT@2!
Y0}V9LKo6$>1pom5|0ak-`2bV^0Kf=jp8x;=

diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/Chart.yaml
deleted file mode 100644
index 0f0a9e17c..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/Chart.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-annotations:
-  catalog.cattle.io/certified: rancher
-  catalog.cattle.io/hidden: "true"
-  catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0'
-  catalog.cattle.io/namespace: cattle-system
-  catalog.cattle.io/os: linux
-  catalog.cattle.io/permits-os: linux,windows
-  catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
-  catalog.cattle.io/release-name: rancher-webhook
-apiVersion: v2
-appVersion: 0.3.2-rc8
-dependencies:
-- condition: capi.enabled
-  name: capi
-  repository: ""
-description: ValidatingAdmissionWebhook for Rancher types
-name: rancher-webhook
-version: 2.0.2+up0.3.2-rc8
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/charts/capi/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/charts/capi/Chart.yaml
deleted file mode 100644
index 388210bef..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/charts/capi/Chart.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v2
-appVersion: 0.0.0
-name: capi
-version: 0.0.0
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/charts/capi/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/charts/capi/templates/service.yaml
deleted file mode 100644
index 08df65d62..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/charts/capi/templates/service.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-kind: Service
-apiVersion: v1
-metadata:
-  name: webhook-service
-  annotations:
-    need-a-cert.cattle.io/secret-name: rancher-webhook-tls
-spec:
-  ports:
-  - name: https
-    port: 443
-    targetPort: 8777
-  selector:
-    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/_helpers.tpl b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/_helpers.tpl
deleted file mode 100644
index c37a65c6f..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/_helpers.tpl
+++ /dev/null
@@ -1,22 +0,0 @@
-{{- define "system_default_registry" -}}
-{{- if .Values.global.cattle.systemDefaultRegistry -}}
-{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
-{{- else -}}
-{{- "" -}}
-{{- end -}}
-{{- end -}}
-
-{{- define "rancher-webhook.labels" -}}
-app: rancher-webhook
-{{- end }}
-
-{{- define "linux-node-tolerations" -}}
-- key: "cattle.io/os"
-  value: "linux"
-  effect: "NoSchedule"
-  operator: "Equal"
-{{- end -}}
-
-{{- define "linux-node-selector" -}}
-kubernetes.io/os: linux
-{{- end -}}
\ No newline at end of file
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/deployment.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/deployment.yaml
deleted file mode 100644
index e4270c1ec..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/deployment.yaml
+++ /dev/null
@@ -1,59 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: rancher-webhook
-spec:
-  selector:
-    matchLabels:
-      app: rancher-webhook
-  template:
-    metadata:
-      labels:
-        app: rancher-webhook
-    spec:
-      {{- if .Values.capi.enabled }}
-      volumes:
-      - name: tls
-        secret:
-          secretName: rancher-webhook-tls
-      {{- end }}
-      {{- if .Values.global.hostNetwork }}
-      hostNetwork: true
-      {{- end }}
-      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
-      {{- if .Values.nodeSelector }}
-{{ toYaml .Values.nodeSelector | indent 8 }}
-      {{- end }}
-      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
-      {{- if .Values.tolerations }}
-{{ toYaml .Values.tolerations | indent 6 }}
-      {{- end }}
-      containers:
-      - env:
-        - name: STAMP
-          value: "{{.Values.stamp}}"
-        - name: ENABLE_CAPI
-          value: "{{.Values.capi.enabled}}"
-        - name: ENABLE_MCM
-          value: "{{.Values.mcm.enabled}}"
-        - name: NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
-        name: rancher-webhook
-        imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
-        ports:
-        - name: https
-          containerPort: 9443
-        - name: capi-https
-          containerPort: 8777
-        {{- if .Values.capi.enabled }}
-        volumeMounts:
-        - name: tls
-          mountPath: /tmp/k8s-webhook-server/serving-certs
-        {{- end }}
-      serviceAccountName: rancher-webhook
-      {{- if .Values.priorityClassName }}
-      priorityClassName: "{{.Values.priorityClassName}}"
-      {{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-cluster-role-binding.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-cluster-role-binding.yaml
deleted file mode 100644
index ca439ff48..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-cluster-role-binding.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: rancher-webhook-pre-delete
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "2"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: rancher-webhook-pre-delete
-subjects:
-  - kind: ServiceAccount
-    name: rancher-webhook-pre-delete
-    namespace: {{ .Release.Namespace }}
-{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-cluster-role.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-cluster-role.yaml
deleted file mode 100644
index 777392aad..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-cluster-role.yaml
+++ /dev/null
@@ -1,25 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: rancher-webhook-pre-delete
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "1"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-rules:
-  - apiGroups: [ "admissionregistration.k8s.io" ]
-    resources: [ "mutatingwebhookconfigurations" ]
-    verbs: [ "delete" ]
-    resourceNames: [ "rancher.cattle.io" ]
-  - apiGroups: [ "" ]
-    resources: [ "serviceaccounts" ]
-    verbs: [ "get" ]
-{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
-  - apiGroups: [ "policy" ]
-    resources: [ "podsecuritypolicies" ]
-    verbs: [ "use" ]
-    resourceNames: [ "rancher-webhook-pre-delete" ]
-{{- end }}
-{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-job.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-job.yaml
deleted file mode 100644
index d3608f366..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-job.yaml
+++ /dev/null
@@ -1,39 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: rancher-webhook-pre-delete
-  namespace: {{ .Release.Namespace }}
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "3"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
-spec:
-  backoffLimit: 3
-  template:
-    metadata:
-      name: rancher-webhook-pre-delete
-      labels: {{ include "rancher-webhook.labels" . | nindent 8 }}
-    spec:
-      serviceAccountName: rancher-webhook-pre-delete
-      {{- if .Values.priorityClassName }}
-      priorityClassName: "{{.Values.priorityClassName}}"
-      {{- end }}
-      restartPolicy: OnFailure
-      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
-      {{- if .Values.nodeSelector }}
-{{ toYaml .Values.nodeSelector | indent 8 }}
-      {{- end }}
-      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
-      {{- if .Values.tolerations }}
-{{ toYaml .Values.tolerations | indent 6 }}
-      {{- end }}
-      containers:
-        - name: rancher-webhook-pre-delete
-          image: "{{ include "system_default_registry" . }}{{ .Values.preDelete.image.repository }}:{{ .Values.preDelete.image.tag }}"
-          imagePullPolicy: IfNotPresent
-          securityContext:
-            runAsUser: 0
-          command: [ "kubectl", "delete", "--ignore-not-found=true", "mutatingwebhookconfigurations", "rancher.cattle.io" ]
-{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-psp.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-psp.yaml
deleted file mode 100644
index df29bf8ff..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-psp.yaml
+++ /dev/null
@@ -1,33 +0,0 @@
-{{- if and .Values.preDelete.enabled (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
-apiVersion: policy/v1beta1
-kind: PodSecurityPolicy
-metadata:
-  name: rancher-webhook-pre-delete
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "1"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-spec:
-  privileged: false
-  hostNetwork: false
-  hostIPC: false
-  hostPID: false
-  runAsUser:
-    rule: 'RunAsAny'
-  seLinux:
-    rule: 'RunAsAny'
-  supplementalGroups:
-    rule: 'MustRunAs'
-    ranges:
-      - min: 1
-        max: 65535
-  fsGroup:
-    rule: 'MustRunAs'
-    ranges:
-      - min: 1
-        max: 65535
-  readOnlyRootFilesystem: false
-  volumes:
-    - 'secret'
-{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-service-account.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-service-account.yaml
deleted file mode 100644
index 93e215394..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/pre-delete-hook-service-account.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: rancher-webhook-pre-delete
-  namespace: {{ .Release.Namespace }}
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "1"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/rbac.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/rbac.yaml
deleted file mode 100644
index 9afaae6c6..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/rbac.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: rancher-webhook
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cluster-admin
-subjects:
-- kind: ServiceAccount
-  name: rancher-webhook
-  namespace: {{.Release.Namespace}}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/service.yaml
deleted file mode 100644
index 74a8a9e5a..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/service.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-kind: Service
-apiVersion: v1
-metadata:
-  name: rancher-webhook
-  namespace: cattle-system
-spec:
-  ports:
-  - port: 443
-    targetPort: 9443
-    protocol: TCP
-    name: https
-  selector:
-    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/serviceaccount.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/serviceaccount.yaml
deleted file mode 100644
index f9251b418..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/serviceaccount.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/webhook.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/webhook.yaml
deleted file mode 100644
index 4f95ae896..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/templates/webhook.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: rancher.cattle.io
-webhooks:
-- admissionReviewVersions:
-  - v1
-  - v1beta1
-  clientConfig:
-    service:
-      name: rancher-webhook
-      namespace: cattle-system
-      path: /v1/webhook/validation
-      port: 443
-  failurePolicy: Ignore
-  matchPolicy: Equivalent
-  name: rancher.cattle.io
-  sideEffects: None
-  timeoutSeconds: 10
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/values.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc8/values.yaml
deleted file mode 100644
index 013082b65..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc8/values.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-image:
-  repository: rancher/rancher-webhook
-  tag: v0.3.2-rc8
-  imagePullPolicy: IfNotPresent
-
-global:
-  cattle:
-    systemDefaultRegistry: ""
-  hostNetwork: false
-
-capi:
-  enabled: false
-
-mcm:
-  enabled: true
-
-preDelete:
-  enabled: true
-  image:
-    repository: rancher/kubectl
-    tag: v1.23.3
-
-# tolerations for the webhook deployment. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for more info
-tolerations: []
-nodeSelector: {}
-
-## PriorityClassName assigned to deployment.
-priorityClassName: ""
diff --git a/index.yaml b/index.yaml
index e769d2e88..ff0f43a87 100755
--- a/index.yaml
+++ b/index.yaml
@@ -11686,28 +11686,6 @@ entries:
     - assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000.tgz
     version: 2.1.000
   rancher-webhook:
-  - annotations:
-      catalog.cattle.io/certified: rancher
-      catalog.cattle.io/hidden: "true"
-      catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0'
-      catalog.cattle.io/namespace: cattle-system
-      catalog.cattle.io/os: linux
-      catalog.cattle.io/permits-os: linux,windows
-      catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
-      catalog.cattle.io/release-name: rancher-webhook
-    apiVersion: v2
-    appVersion: 0.3.2-rc8
-    created: "2023-01-10T11:00:54.948658-07:00"
-    dependencies:
-    - condition: capi.enabled
-      name: capi
-      repository: ""
-    description: ValidatingAdmissionWebhook for Rancher types
-    digest: 10a3789d302e1ad1d3ffd989552622c737e76a80c0e10bd3ba45e0c1653656c4
-    name: rancher-webhook
-    urls:
-    - assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc8.tgz
-    version: 2.0.2+up0.3.2-rc8
   - annotations:
       catalog.cattle.io/certified: rancher
       catalog.cattle.io/hidden: "true"

From e118707e6fb23804220e42f80330c037e6c098ce Mon Sep 17 00:00:00 2001
From: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
Date: Wed, 11 Jan 2023 15:42:02 -0700
Subject: [PATCH 3/3] Make charts

---
 .../rancher-webhook-2.0.2+up0.3.2-rc9.tgz     | Bin 0 -> 2465 bytes
 .../2.0.2+up0.3.2-rc9/Chart.yaml              |  18 ++++++
 .../2.0.2+up0.3.2-rc9/charts/capi/Chart.yaml  |   4 ++
 .../charts/capi/templates/service.yaml        |  13 ++++
 .../2.0.2+up0.3.2-rc9/templates/_helpers.tpl  |  22 +++++++
 .../templates/deployment.yaml                 |  59 ++++++++++++++++++
 .../pre-delete-hook-cluster-role-binding.yaml |  19 ++++++
 .../pre-delete-hook-cluster-role.yaml         |  19 ++++++
 .../templates/pre-delete-hook-job.yaml        |  39 ++++++++++++
 .../pre-delete-hook-service-account.yaml      |  12 ++++
 .../2.0.2+up0.3.2-rc9/templates/rbac.yaml     |  12 ++++
 .../2.0.2+up0.3.2-rc9/templates/service.yaml  |  13 ++++
 .../templates/serviceaccount.yaml             |   4 ++
 .../2.0.2+up0.3.2-rc9/templates/webhook.yaml  |  19 ++++++
 .../2.0.2+up0.3.2-rc9/values.yaml             |  28 +++++++++
 index.yaml                                    |  22 +++++++
 16 files changed, 303 insertions(+)
 create mode 100644 assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc9.tgz
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/Chart.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/charts/capi/Chart.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/charts/capi/templates/service.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/_helpers.tpl
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/deployment.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-cluster-role-binding.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-cluster-role.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-job.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-service-account.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/rbac.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/service.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/serviceaccount.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/webhook.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc9/values.yaml

diff --git a/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc9.tgz b/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc9.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..5f929b5c9fa3e6e7fb637d99bc7f762020a8278d
GIT binary patch
literal 2465
zcmV;S310ReiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PI}rZ{s!+-_QCh1}YBw;a0LNJN8z%9+0N#p@(iRNP0aS7R7?5
z#x@&@R7uKdF3tab(EDLIc6PJg-8;<}+k6a16z4Y&l2$~}H7e&87i%eRMrUiHjC)5S
z{^Hrl^E_`hoo1h&=XF2F<MI5(cse<m&n73+lkp30JoRVO7vMdg2)ilKhNu_b2anZ#
zxG#i=5YiCCq|ku{K#3t-u3Sot;pj3sqNog8G7JMK)=F=)H48%&0oX<*X!ka`NfzjA
zP-!Mb05AXg4UFCK%=H`({sLpy&%VCw?J7uwIwlkY$O|2PrwvBEjinBNGm-q>TN|T_
zn9)wv>eVe1p}f_-txNT2iS4`dLTcZAy<2F79EnCJ6~3ChQqe3Dv!6?*8{Z;vT>bRi
ziR(Lxer<&qqX<z@hB~kupi+d)WQ{0^nTvufIEEHLK1f<<0Vs^6W=5*J0BqX|QB%d@
zyx-4+vyd1jR;OXabUNa{a*<#u6<p<Fg1L)PTm7O}li|Cb>;E~4Yk@!Yavtc3)W!b|
z;R)*JH30kY-<yoP_<u4!8SwuY#3Hi7po1C3q8N1*AHa}R0GnFh0Wt=c3FnuRGkO=m
z56cT_E){AN#<EsiE(kA7i{aT&06BVphf9)hbA>CWO@UPaYpKlznp>%E0$38R(Xvup
zOM4c0SCvOJY89u($FgFD-yuhX+jWJ!xfFemoEj-=cvhc3?AY}u?!>ab0wX!9+*W2-
zY1RnE)If+amv<2g<H9u}tc{6vFv|ETfd+MI5<*G!h)O{*HhQG#8pDJ$v2t+3Xv%nG
z2ouI3B6RA}M%ieQR0vEgrPYulfVaO`LWX#a9I25ifcpo_`sypVR7@&n?#?*T`hr9V
zL~FJZ7=n>aajm%9GJ6r9dSMQ96zbx?!6@d$pdP(jBacyO*Tf%a3ijZ?H$U+^_&=M?
zCIkK-gYNGg2yw{-f}NxCyD*34cdEc;8=Qv+D{aV@;QpLD2sy5o-fl0RSKVU8gjs_9
zCq1&?ive<t)epOt2SvE`-D*BjXLY-rERgG*0g2;n*S6%;Wt2q<P71UQTrL<naD%Dw
zYDOTbA<JB;py-<x;Btx71Ylpt>m2&CNJ+*izZAOd^WPG}?cLAQ5JMM$pUcoTGj#;i
z;MD*Ack6${M0}t(xJUmdlapyj|L0S0Ht7E`s2PTmIM$=h*t%gN4B)%!{aX<l5)wm#
zD$wlejgFC~wdJbJ9ju5Ly8bcKxx4_NSL*=EWmoiTjF%E`vDnE3pcEse4q!Fo<y5`%
zMjOeK2rJf3@py*oYA}sdp{WNiOD_5*!l`>Uprluz0stHCZr!xy0~d~KFVBwacMnWZ
zo`k!g!i7ITFcG3K@Or0YO{S2+D;W8267l{Pe?ULSmY^-4b%&fSWNnH%+bL?(CGVBA
z*`N}1_K2WViqr>3)mRiLHud{2*U0rxr*AGBtD=Pa`}=ZiZAcV9JlI=Z&o55D{qg+W
z+3DpEk1}Yk*+=-iIeYUcn}|k_ak)5sbAEk!dUoDr^1YH#bKL_h8S?N7m+jJ`{F0b;
zQ0cB)<?O1qdFTZ%)3;RU`y)<=3l9(X_tlHcI=gkq1`iLxR<$83czAeOjo1%XEqR)u
ztG&gr(*&CH7fWUI_PWR-zsCGj3+hrT6TsKg>13-<`l6jZ9beDq^Q!hBa4X^MjZ8$J
zq)n6qh|*U1I~<uP9^Jgw6{=}e8&sq8BaK!mDx+Jnv{Wc-M)8!=lw~hY_G|N2BwF+A
z3sUP9zExYlr-pQ&+SY!KwA=rS6*^&-Mscz=KzX7KDo06<&Vq@MiPd4A;okipzZ3uY
zQ{SHt{@*cZO9PA4Srbi~KB8I>>XO8)rDFfd?5cb7Itw}~$MGy*C|8o>xA`*J??5{B
zYO^YTujMD~3gw!9!ZgQ=&Yl*4y+$6ndOb>e+5xl%>r^|p$X07(2VnblPj#UZab^$f
z02a8Es#Fn$*|4v2&`c;r3^B}qE(zlpTB-UJ7L>&7Z%QWdBeQA&Y)$GRbEuQWuSj#y
zcM2BQEm*d8+DE4|J&nz`)IMJ2+gk2LSqzN`d_dVRjNT9bpOz8Wi~qAu{O|iSf7t&y
z3LS#~+X!^9Mffs-fBaE^KjB#5aS8l7fVW_iav#2keVTJ<!!N~Fm6nO3nD>YhlkMOa
zQ$nR!vQ<)r&Uu#&szu&Bm%Pg=!|$xVnBn^9Lf*71XTL0kvrlrX(lh!BO<Fiuh|iJ^
z$NyjD;yn|=d+^_%ch7(M-h4R!bsT!C|GyxHu4`Za?{e`}j6cMk{A?`2<e4l%l^|ab
zdLx(1A6djq0F%9`?}I$__n)pRW!uc0ACSM<mf*OloV-9`s=TI5-~B^;PZ&=W4$1MO
zCCBS*;@%Ykbqd&SKIEYp;2N9u<bt~m^Q^Gl6=Ub2rMjI)nq-Sn3WL9!cG_Dd;#B`r
zqYA)lrEQ~#q}cct?BX<${i<@pUV-g6Y$Z~_5YjkHnTYV4?9lA1eU9C$9j@AkxK@YT
z{{j`9!qa<#FR<_Y$IR=-e-nQ`#D7Pjr`rF@@^`XH|I1FmM+pZ%lXz&i{%3Lhvz!Co
zr~lK**7>jTkpDjp9U-^>oGI@z2}#0;iAI)tXO4T<4sZ*Aw(;lxCQGqf{|kHn3=ptS
z|0n)r>-^`*p#MjqmfCbJ{eIPMDN_4tRvA%N$0VHWYXIc|2t(8gP3KfZtfY}t@&JB1
zyKL-Hm4_qR2h4g8f_>^K{i0~E{y*K_-=cl`KlWzb{GUG=&VL_;p2fExRPKwV-TGe!
zSRdd1&rVLZ?|%&O|52!Q{`--Q$T|e5FAx{^hR>Q=s@-5w=d7$^X=Q$UHRu&?7~U4b
z6b{2?Tzo9hkn}s{428)@EUpsfSoLVWyivE~7J24+<Yyl@<5A->Z1$*9lua5A%reh4
zR~f`Cr)L$1-pkVS-x9VV9JgbU#&iH^7UFq!J46R?Aw|l^un1*hu8~R+>Hx;x$AH<c
z{?j#4Mvo|o*|Yr@#6JD^=3D;%blCqp4n6ue1fJ_zjXxIHv}-=K=mR|iJ*NN9l?&J#
z|IfUR|3CI--k|@-peM%v%?kl6yV|jpWEY5`L$W&pjXy)l?@aao7fN<%swZ90y-%?_
feNfzu7?J}64K&a|2h)E800960nwJW<08Rh^s5{#3

literal 0
HcmV?d00001

diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/Chart.yaml
new file mode 100644
index 000000000..28c1d5c31
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/Chart.yaml
@@ -0,0 +1,18 @@
+annotations:
+  catalog.cattle.io/certified: rancher
+  catalog.cattle.io/hidden: "true"
+  catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0'
+  catalog.cattle.io/namespace: cattle-system
+  catalog.cattle.io/os: linux
+  catalog.cattle.io/permits-os: linux,windows
+  catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
+  catalog.cattle.io/release-name: rancher-webhook
+apiVersion: v2
+appVersion: 0.3.2-rc9
+dependencies:
+- condition: capi.enabled
+  name: capi
+  repository: ""
+description: ValidatingAdmissionWebhook for Rancher types
+name: rancher-webhook
+version: 2.0.2+up0.3.2-rc9
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/charts/capi/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/charts/capi/Chart.yaml
new file mode 100644
index 000000000..388210bef
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/charts/capi/Chart.yaml
@@ -0,0 +1,4 @@
+apiVersion: v2
+appVersion: 0.0.0
+name: capi
+version: 0.0.0
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/charts/capi/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/charts/capi/templates/service.yaml
new file mode 100644
index 000000000..08df65d62
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/charts/capi/templates/service.yaml
@@ -0,0 +1,13 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: webhook-service
+  annotations:
+    need-a-cert.cattle.io/secret-name: rancher-webhook-tls
+spec:
+  ports:
+  - name: https
+    port: 443
+    targetPort: 8777
+  selector:
+    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/_helpers.tpl b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/_helpers.tpl
new file mode 100644
index 000000000..c37a65c6f
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/_helpers.tpl
@@ -0,0 +1,22 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{- define "rancher-webhook.labels" -}}
+app: rancher-webhook
+{{- end }}
+
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+  value: "linux"
+  effect: "NoSchedule"
+  operator: "Equal"
+{{- end -}}
+
+{{- define "linux-node-selector" -}}
+kubernetes.io/os: linux
+{{- end -}}
\ No newline at end of file
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/deployment.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/deployment.yaml
new file mode 100644
index 000000000..e4270c1ec
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/deployment.yaml
@@ -0,0 +1,59 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: rancher-webhook
+spec:
+  selector:
+    matchLabels:
+      app: rancher-webhook
+  template:
+    metadata:
+      labels:
+        app: rancher-webhook
+    spec:
+      {{- if .Values.capi.enabled }}
+      volumes:
+      - name: tls
+        secret:
+          secretName: rancher-webhook-tls
+      {{- end }}
+      {{- if .Values.global.hostNetwork }}
+      hostNetwork: true
+      {{- end }}
+      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+      {{- if .Values.nodeSelector }}
+{{ toYaml .Values.nodeSelector | indent 8 }}
+      {{- end }}
+      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
+      {{- if .Values.tolerations }}
+{{ toYaml .Values.tolerations | indent 6 }}
+      {{- end }}
+      containers:
+      - env:
+        - name: STAMP
+          value: "{{.Values.stamp}}"
+        - name: ENABLE_CAPI
+          value: "{{.Values.capi.enabled}}"
+        - name: ENABLE_MCM
+          value: "{{.Values.mcm.enabled}}"
+        - name: NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+        name: rancher-webhook
+        imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
+        ports:
+        - name: https
+          containerPort: 9443
+        - name: capi-https
+          containerPort: 8777
+        {{- if .Values.capi.enabled }}
+        volumeMounts:
+        - name: tls
+          mountPath: /tmp/k8s-webhook-server/serving-certs
+        {{- end }}
+      serviceAccountName: rancher-webhook
+      {{- if .Values.priorityClassName }}
+      priorityClassName: "{{.Values.priorityClassName}}"
+      {{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-cluster-role-binding.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-cluster-role-binding.yaml
new file mode 100644
index 000000000..ca439ff48
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-cluster-role-binding.yaml
@@ -0,0 +1,19 @@
+{{- if .Values.preDelete.enabled }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rancher-webhook-pre-delete
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "2"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: rancher-webhook-pre-delete
+subjects:
+  - kind: ServiceAccount
+    name: rancher-webhook-pre-delete
+    namespace: {{ .Release.Namespace }}
+{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-cluster-role.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-cluster-role.yaml
new file mode 100644
index 000000000..f3cc9c003
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-cluster-role.yaml
@@ -0,0 +1,19 @@
+{{- if .Values.preDelete.enabled }}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: rancher-webhook-pre-delete
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "1"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+rules:
+  - apiGroups: [ "admissionregistration.k8s.io" ]
+    resources: [ "mutatingwebhookconfigurations" ]
+    verbs: [ "delete" ]
+    resourceNames: [ "rancher.cattle.io" ]
+  - apiGroups: [ "" ]
+    resources: [ "serviceaccounts" ]
+    verbs: [ "get" ]
+{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-job.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-job.yaml
new file mode 100644
index 000000000..d3608f366
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-job.yaml
@@ -0,0 +1,39 @@
+{{- if .Values.preDelete.enabled }}
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: rancher-webhook-pre-delete
+  namespace: {{ .Release.Namespace }}
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "3"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+spec:
+  backoffLimit: 3
+  template:
+    metadata:
+      name: rancher-webhook-pre-delete
+      labels: {{ include "rancher-webhook.labels" . | nindent 8 }}
+    spec:
+      serviceAccountName: rancher-webhook-pre-delete
+      {{- if .Values.priorityClassName }}
+      priorityClassName: "{{.Values.priorityClassName}}"
+      {{- end }}
+      restartPolicy: OnFailure
+      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+      {{- if .Values.nodeSelector }}
+{{ toYaml .Values.nodeSelector | indent 8 }}
+      {{- end }}
+      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
+      {{- if .Values.tolerations }}
+{{ toYaml .Values.tolerations | indent 6 }}
+      {{- end }}
+      containers:
+        - name: rancher-webhook-pre-delete
+          image: "{{ include "system_default_registry" . }}{{ .Values.preDelete.image.repository }}:{{ .Values.preDelete.image.tag }}"
+          imagePullPolicy: IfNotPresent
+          securityContext:
+            runAsUser: 0
+          command: [ "kubectl", "delete", "--ignore-not-found=true", "mutatingwebhookconfigurations", "rancher.cattle.io" ]
+{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-service-account.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-service-account.yaml
new file mode 100644
index 000000000..93e215394
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/pre-delete-hook-service-account.yaml
@@ -0,0 +1,12 @@
+{{- if .Values.preDelete.enabled }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: rancher-webhook-pre-delete
+  namespace: {{ .Release.Namespace }}
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "1"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/rbac.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/rbac.yaml
new file mode 100644
index 000000000..9afaae6c6
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/rbac.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rancher-webhook
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: rancher-webhook
+  namespace: {{.Release.Namespace}}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/service.yaml
new file mode 100644
index 000000000..74a8a9e5a
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/service.yaml
@@ -0,0 +1,13 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: rancher-webhook
+  namespace: cattle-system
+spec:
+  ports:
+  - port: 443
+    targetPort: 9443
+    protocol: TCP
+    name: https
+  selector:
+    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/serviceaccount.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/serviceaccount.yaml
new file mode 100644
index 000000000..f9251b418
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/webhook.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/webhook.yaml
new file mode 100644
index 000000000..4f95ae896
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/templates/webhook.yaml
@@ -0,0 +1,19 @@
+apiVersion: admissionregistration.k8s.io/v1
+kind: ValidatingWebhookConfiguration
+metadata:
+  name: rancher.cattle.io
+webhooks:
+- admissionReviewVersions:
+  - v1
+  - v1beta1
+  clientConfig:
+    service:
+      name: rancher-webhook
+      namespace: cattle-system
+      path: /v1/webhook/validation
+      port: 443
+  failurePolicy: Ignore
+  matchPolicy: Equivalent
+  name: rancher.cattle.io
+  sideEffects: None
+  timeoutSeconds: 10
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc9/values.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/values.yaml
new file mode 100644
index 000000000..6f0caaad7
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc9/values.yaml
@@ -0,0 +1,28 @@
+image:
+  repository: rancher/rancher-webhook
+  tag: v0.3.2-rc9
+  imagePullPolicy: IfNotPresent
+
+global:
+  cattle:
+    systemDefaultRegistry: ""
+  hostNetwork: false
+
+capi:
+  enabled: false
+
+mcm:
+  enabled: true
+
+preDelete:
+  enabled: true
+  image:
+    repository: rancher/kubectl
+    tag: v1.23.3
+
+# tolerations for the webhook deployment. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for more info
+tolerations: []
+nodeSelector: {}
+
+## PriorityClassName assigned to deployment.
+priorityClassName: ""
diff --git a/index.yaml b/index.yaml
index ff0f43a87..e8d880c9e 100755
--- a/index.yaml
+++ b/index.yaml
@@ -11686,6 +11686,28 @@ entries:
     - assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000.tgz
     version: 2.1.000
   rancher-webhook:
+  - annotations:
+      catalog.cattle.io/certified: rancher
+      catalog.cattle.io/hidden: "true"
+      catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0'
+      catalog.cattle.io/namespace: cattle-system
+      catalog.cattle.io/os: linux
+      catalog.cattle.io/permits-os: linux,windows
+      catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
+      catalog.cattle.io/release-name: rancher-webhook
+    apiVersion: v2
+    appVersion: 0.3.2-rc9
+    created: "2023-01-11T15:41:46.082346-07:00"
+    dependencies:
+    - condition: capi.enabled
+      name: capi
+      repository: ""
+    description: ValidatingAdmissionWebhook for Rancher types
+    digest: 36808dda6c931028608e7b073d7e6a7e603303c077558e62446917b216e9f1b1
+    name: rancher-webhook
+    urls:
+    - assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc9.tgz
+    version: 2.0.2+up0.3.2-rc9
   - annotations:
       catalog.cattle.io/certified: rancher
       catalog.cattle.io/hidden: "true"