From 5e3c94130179991b90a57632b1e38a7a15432888 Mon Sep 17 00:00:00 2001
From: Kinara Shah <kinara@rancher.com>
Date: Thu, 24 Feb 2022 16:33:01 -0800
Subject: [PATCH] make charts

---
 .../rancher-webhook-1.0.4+up0.2.5-rc2.tgz     | Bin 0 -> 2422 bytes
 .../1.0.4+up0.2.5-rc2/Chart.yaml              |  15 ++++++
 .../1.0.4+up0.2.5-rc2/charts/capi/Chart.yaml  |   4 ++
 .../charts/capi/templates/service.yaml        |  13 +++++
 .../1.0.4+up0.2.5-rc2/templates/_helpers.tpl  |  11 ++++
 .../templates/deployment.yaml                 |  48 ++++++++++++++++++
 .../pre-delete-hook-cluster-role-binding.yaml |  19 +++++++
 .../pre-delete-hook-cluster-role.yaml         |  23 +++++++++
 .../templates/pre-delete-hook-job.yaml        |  32 ++++++++++++
 .../templates/pre-delete-hook-psp.yaml        |  33 ++++++++++++
 .../pre-delete-hook-service-account.yaml      |  12 +++++
 .../1.0.4+up0.2.5-rc2/templates/rbac.yaml     |  12 +++++
 .../1.0.4+up0.2.5-rc2/templates/service.yaml  |  13 +++++
 .../templates/serviceaccount.yaml             |   4 ++
 .../1.0.4+up0.2.5-rc2/templates/webhook.yaml  |  19 +++++++
 .../1.0.4+up0.2.5-rc2/values.yaml             |  24 +++++++++
 16 files changed, 282 insertions(+)
 create mode 100644 assets/rancher-webhook/rancher-webhook-1.0.4+up0.2.5-rc2.tgz
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/Chart.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/charts/capi/Chart.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/charts/capi/templates/service.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/_helpers.tpl
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/deployment.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-cluster-role-binding.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-cluster-role.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-job.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-psp.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-service-account.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/rbac.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/service.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/serviceaccount.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/webhook.yaml
 create mode 100644 charts/rancher-webhook/1.0.4+up0.2.5-rc2/values.yaml

diff --git a/assets/rancher-webhook/rancher-webhook-1.0.4+up0.2.5-rc2.tgz b/assets/rancher-webhook/rancher-webhook-1.0.4+up0.2.5-rc2.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..b508c658aae60baf4a99b8f30739f2c68e631617
GIT binary patch
literal 2422
zcmV-+35oU}iwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PI}dZ`-;R@3a1j0}VqSR>|^5oKC<Va?^C^(BvA)U5BB#C}`=}
z<_$$^B;_{C{J#$p^<`O(o!0Sfdv#u%P~_ne&ENSXEeQ`6D4kC@T?ld4yI2sZ-Fp(T
z7Y8HH^StqBlzn=h*ZlOxr-K*$(ZCyfgZ|h%d*Ss*gH!JXc!v{VJ0(gJ`NI3^xtcHc
zoe<$%Xrig$%C`Ulq6rgoHy~OwbgAeCC^el?41LJ=N^7?T4MXHU*jgrNw|3zqLKTw$
zeK3uVx>p*b*3Lrtz$i~Xw?37~kSKIgmZe<99=1qK-=kDia37Wfi^OsHujdZjQ%42^
zE5sOih&-UEe9M7A@Q~`PQ$S+sA}3RZp#@+jNgFKyiLp>r3wiH@ZCfF#K+@QZdrue*
ziKcvh9!6B9Gycnn1T!Jw#)t{}K1OA=i@q!b?Yo{k`b!d50zc39-^Bltumsg%6~He1
zpLwGu{!hJ8hyP;`jmRAR#>UP!MX$L#0W_KWu&g#EK*nH_Fg6j42KPR^om~q(k*JVs
z%bGJWB`jAhnq^Y~7~sFg8A+JF!8uhr2Nb|UD1D9klaO~l%m`CxSt<C^kvS;K_9%$f
znp5RtS+T^|$WY_vvs_*yMcXUiB~uJE%buH;?Yjfd9az?%KnsS_=*kSxdV!EH4TKmo
zaUUVqF5Du*LhD%hy^Npas8OYQD-?n11%d|{Yt>W10>gw+K6h|QgOqVk6Uwzic<5BK
z^|IL_ArUB_39BZD4<CO0D$UTuzs4wLM5F3`Tp){4Dp$u}sS0-Ce>7~`|M7Tu*5Usc
z^zh(7h%?F&Y=g>=p@HQ`nd8z1XSK4@j&ug@dt)FBt_zdgisy1zEGgGBu>Y)j_7^cg
zrm+0SuH-=;Zv1W4->9*>T}GzJlwm;Pc+>tCoK~x6vbWzFZO4C2qkW|}umk^t(Wq(v
z&xYf1hyP<x-B%`Yta{77bw_#V!|U?<w<6ReB%1i8H{8UHiZMu^Dr6XFA&r5Jhz=I-
zGR&C<fL7E26x%KzSDP;-w#H&B6M#aDl$L@e5tgHzTyo7+$wy%zQCED6mg}~6bgGf<
zy0GTBr24~jUGrvg7o=d3E1Ig|6V;27Yu(!@d(};UDRw$ki+_`dfeZfwPSdzX!>e`X
zYqJG{r=AAN+WH`0Ry>R4y8Y$+YEoOEEI#nTet0P4RGLKbYGrQ>y}UmE>D}eWi}T6b
zM;X+^tw;D=U0glNCJLg*xLluKUEWU4FD{!*-bfMEw*bJ5A`5SDw%(ezPl#Ul<qmbr
zptkI5985TQcqn)EBc|1b)#~A){L-_*ZsnN5YUOV{)?^N=)k!&HJ0#cSsXOTQ2E#@d
zsIOlvq*j~zBJ*!+>r-y1iICcdzm7)3jWOvL?d%x%>g?>Sd}<(kB@*5yLLJEfQQFIV
zIXxZ4y}MVcM6N=)MA=I}QfE6rsf(dmTY%?5kdAK!{txX5Y`6chL?_I`C?{LQfF(+!
zbfjSDOeqg3pYP`x?6Cj+{-ELi4@QH2m;XBoHB4C<Iv1)GGEcek5#*EvE=lx4Nc!K*
z5V?1+ve>qC94^d8xe*M1GTUUg1L0J=%_{9ZJUjs90ZYP1T=}}i8yN%F$Y}!D3uKY2
z7QJ+&?Zet+jmOR>r1OQgeXs|1%i|mpai%G4AEr1HvVe%hY}%Jb>m)&d7-DGtoe|0~
zv{LxwwuQv>?@}c3BdclwY%J<NYp9axZx|S@>EtYK*HoRg)p9tE<*DUuQ_FE<a<A@n
z(G0Z+><<$+{V4Qh`u}MW;V%6@@|ya8F!uVL{yzroqyING(B2l|`&9h>XHonK!(1O1
zieLHg0c=tfi}I+TzJ@mZny0FjNMwL!M3m^P%#<%lAoz^VlRPdghAdG|O?M-ClU1g_
zv*-B=SM@d1wJB%2EV%<sj8$oweU7@FU%ry9Tw@U`3=&E8eb$X)3+F`beyNsymX7J{
zRZjcs|KG&)3lo96@_+sDSwsJOXQQtEcNBW6|34)<SX93LKg9H@I({E_@|&>)!vk4@
zGC?{e!JU}R-qDC^ABH<qpL==eU%p&rj<B9N-6JQmDS^ZkNV-Te{mkDG$`Xm+NP4qM
z8|{3PS`yE$ujjrwyb41*vU$ypCa-5V#n@V0ulg0X@<MQppY?j;QYQRd{Zpaz!COnb
zMG;9c`~mE|>TSO)orRZRI}V-mbYpX&ota2@__yqE&&yp7$jdD*MQ3!sJ=)*?$0~jv
z``;gqh8y;O+|~b&LQl2-#_08y{V8fvcmWd;-sT#}D5@^*tKz=Gvc{4wDZ_bne5v)U
zlWBZAxma(QynS6YR2tm`KM6x0PHxiHbAEr4)nVUJo_yZ^Jc(n55pqpf9+K6&UL{Ir
z-A$265<ah2QX|TJ=$E!6BA<O2pPmj+Er6LaIn4vHlSsm!IlI3RLcgI5jS;SvVy(*S
zz=<i~o^-ZmPugGq=U$<cNBU2&1-s6Fjhp8`2gAW>cmCrj^i=&{Mt+TI!jBvTK8soS
zMikU`{AYRHgPa53h5wfGpZ%`>dmK7KZTFBR&!PxL!ie%(m2+#2bKBXNH3hV(fBrCT
z!*=}V_Wl4WU>E*}gW<;c?@@>UqtF^`nwEYywAX;NeygjDdx`^OPWGn{#nCWL<Q#S5
zyjU!S7J*<s{Bkj=olz)`jjbOrZ9NG3doSsCMLY5Tba#J)cHzJ8jhp$OLBFg29EA?z
z+jo%rZfQIIiva8S?f>}nbkqKK@&8e1?f%Cj2T`gJpt|LpUv9prSAVuEi>el6<y$NB
z+sjFBa7pn~E==w)Ec^L~$u<K7j3U=&#{4R&(N&MuOKZ=zTtLrU4|8~Y+3(dZLuaol
zc+sWiz|2g2v#iWzwK6Ne^is55{wJYJ!f-PdsVxV9q9I<+W?3u)*Mg^fG>uRs`W6Gh
zL*+x?dk!_*#DB0LQmbA-VtTOOg4l(B?`*^WAB|2s{2zlJ{jCJg^{m>jA1v3O{NAE>
zbO3q`|A)#2?2P}%Uc>+Id!z3B?@{Q9@qhhB70oWaZ6w(_V(5_Ul2z>&TTET9{RdmJ
oo0To;g62)L?dgO3)>xMu=%}NPI@+859{>RV|ITQr697&C0I<Q+H2?qr

literal 0
HcmV?d00001

diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/Chart.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/Chart.yaml
new file mode 100644
index 000000000..17de40541
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/Chart.yaml
@@ -0,0 +1,15 @@
+annotations:
+  catalog.cattle.io/certified: rancher
+  catalog.cattle.io/hidden: "true"
+  catalog.cattle.io/namespace: cattle-system
+  catalog.cattle.io/os: linux
+  catalog.cattle.io/release-name: rancher-webhook
+apiVersion: v2
+appVersion: 0.2.5-rc2
+dependencies:
+- condition: capi.enabled
+  name: capi
+  repository: ""
+description: ValidatingAdmissionWebhook for Rancher types
+name: rancher-webhook
+version: 1.0.4+up0.2.5-rc2
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/charts/capi/Chart.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/charts/capi/Chart.yaml
new file mode 100644
index 000000000..388210bef
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/charts/capi/Chart.yaml
@@ -0,0 +1,4 @@
+apiVersion: v2
+appVersion: 0.0.0
+name: capi
+version: 0.0.0
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/charts/capi/templates/service.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/charts/capi/templates/service.yaml
new file mode 100644
index 000000000..08df65d62
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/charts/capi/templates/service.yaml
@@ -0,0 +1,13 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: webhook-service
+  annotations:
+    need-a-cert.cattle.io/secret-name: rancher-webhook-tls
+spec:
+  ports:
+  - name: https
+    port: 443
+    targetPort: 8777
+  selector:
+    app: rancher-webhook
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/_helpers.tpl b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/_helpers.tpl
new file mode 100644
index 000000000..45f62d0b8
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/_helpers.tpl
@@ -0,0 +1,11 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{- define "rancher-webhook.labels" -}}
+app: rancher-webhook
+{{- end }}
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/deployment.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/deployment.yaml
new file mode 100644
index 000000000..4431a78ba
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/deployment.yaml
@@ -0,0 +1,48 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: rancher-webhook
+spec:
+  selector:
+    matchLabels:
+      app: rancher-webhook
+  template:
+    metadata:
+      labels:
+        app: rancher-webhook
+    spec:
+      volumes:
+      - name: tls
+        secret:
+          secretName: rancher-webhook-tls
+      {{- if .Values.global.hostNetwork }}
+      hostNetwork: true
+      {{- end }}
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      containers:
+      - env:
+        - name: STAMP
+          value: "{{.Values.stamp}}"
+        - name: ENABLE_CAPI
+          value: "{{.Values.capi.enabled}}"
+        - name: ENABLE_MCM
+          value: "{{.Values.mcm.enabled}}"
+        - name: NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+        name: rancher-webhook
+        imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
+        ports:
+        - name: https
+          containerPort: 9443
+        - name: capi-https
+          containerPort: 8777
+        volumeMounts:
+        - name: tls
+          mountPath: /tmp/k8s-webhook-server/serving-certs
+      serviceAccountName: rancher-webhook
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-cluster-role-binding.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-cluster-role-binding.yaml
new file mode 100644
index 000000000..ca439ff48
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-cluster-role-binding.yaml
@@ -0,0 +1,19 @@
+{{- if .Values.preDelete.enabled }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rancher-webhook-pre-delete
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "2"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: rancher-webhook-pre-delete
+subjects:
+  - kind: ServiceAccount
+    name: rancher-webhook-pre-delete
+    namespace: {{ .Release.Namespace }}
+{{- end }}
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-cluster-role.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-cluster-role.yaml
new file mode 100644
index 000000000..36a1c7fef
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-cluster-role.yaml
@@ -0,0 +1,23 @@
+{{- if .Values.preDelete.enabled }}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: rancher-webhook-pre-delete
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "1"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+rules:
+  - apiGroups: [ "admissionregistration.k8s.io" ]
+    resources: [ "mutatingwebhookconfigurations" ]
+    verbs: [ "delete" ]
+    resourceNames: [ "rancher.cattle.io" ]
+  - apiGroups: [ "" ]
+    resources: [ "serviceaccounts" ]
+    verbs: [ "get" ]
+  - apiGroups: [ "policy" ]
+    resources: [ "podsecuritypolicies" ]
+    verbs: [ "use" ]
+    resourceNames: [ "rancher-webhook-pre-delete" ]
+{{- end }}
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-job.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-job.yaml
new file mode 100644
index 000000000..ad80c6085
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-job.yaml
@@ -0,0 +1,32 @@
+{{- if .Values.preDelete.enabled }}
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: rancher-webhook-pre-delete
+  namespace: {{ .Release.Namespace }}
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "3"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+spec:
+  backoffLimit: 3
+  template:
+    metadata:
+      name: rancher-webhook-pre-delete
+      labels: {{ include "rancher-webhook.labels" . | nindent 8 }}
+    spec:
+      serviceAccountName: rancher-webhook-pre-delete
+      restartPolicy: OnFailure
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      containers:
+        - name: rancher-webhook-pre-delete
+          image: "{{ include "system_default_registry" . }}{{ .Values.preDelete.image.repository }}:{{ .Values.preDelete.image.tag }}"
+          imagePullPolicy: IfNotPresent
+          securityContext:
+            runAsUser: 0
+          command: [ "kubectl", "delete", "--ignore-not-found=true", "mutatingwebhookconfigurations", "rancher.cattle.io" ]
+{{- end }}
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-psp.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-psp.yaml
new file mode 100644
index 000000000..8acf758d0
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-psp.yaml
@@ -0,0 +1,33 @@
+{{- if .Values.preDelete.enabled }}
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+  name: rancher-webhook-pre-delete
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "1"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+spec:
+  privileged: false
+  hostNetwork: false
+  hostIPC: false
+  hostPID: false
+  runAsUser:
+    rule: 'RunAsAny'
+  seLinux:
+    rule: 'RunAsAny'
+  supplementalGroups:
+    rule: 'MustRunAs'
+    ranges:
+      - min: 1
+        max: 65535
+  fsGroup:
+    rule: 'MustRunAs'
+    ranges:
+      - min: 1
+        max: 65535
+  readOnlyRootFilesystem: false
+  volumes:
+    - 'secret'
+{{- end }}
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-service-account.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-service-account.yaml
new file mode 100644
index 000000000..93e215394
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/pre-delete-hook-service-account.yaml
@@ -0,0 +1,12 @@
+{{- if .Values.preDelete.enabled }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: rancher-webhook-pre-delete
+  namespace: {{ .Release.Namespace }}
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "1"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+{{- end }}
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/rbac.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/rbac.yaml
new file mode 100644
index 000000000..9afaae6c6
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/rbac.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rancher-webhook
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: rancher-webhook
+  namespace: {{.Release.Namespace}}
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/service.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/service.yaml
new file mode 100644
index 000000000..74a8a9e5a
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/service.yaml
@@ -0,0 +1,13 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: rancher-webhook
+  namespace: cattle-system
+spec:
+  ports:
+  - port: 443
+    targetPort: 9443
+    protocol: TCP
+    name: https
+  selector:
+    app: rancher-webhook
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/serviceaccount.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/serviceaccount.yaml
new file mode 100644
index 000000000..f9251b418
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: rancher-webhook
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/webhook.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/webhook.yaml
new file mode 100644
index 000000000..4f95ae896
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/templates/webhook.yaml
@@ -0,0 +1,19 @@
+apiVersion: admissionregistration.k8s.io/v1
+kind: ValidatingWebhookConfiguration
+metadata:
+  name: rancher.cattle.io
+webhooks:
+- admissionReviewVersions:
+  - v1
+  - v1beta1
+  clientConfig:
+    service:
+      name: rancher-webhook
+      namespace: cattle-system
+      path: /v1/webhook/validation
+      port: 443
+  failurePolicy: Ignore
+  matchPolicy: Equivalent
+  name: rancher.cattle.io
+  sideEffects: None
+  timeoutSeconds: 10
diff --git a/charts/rancher-webhook/1.0.4+up0.2.5-rc2/values.yaml b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/values.yaml
new file mode 100644
index 000000000..3ab194db0
--- /dev/null
+++ b/charts/rancher-webhook/1.0.4+up0.2.5-rc2/values.yaml
@@ -0,0 +1,24 @@
+image:
+  repository: rancher/rancher-webhook
+  tag: v0.2.5-rc2
+  imagePullPolicy: IfNotPresent
+
+global:
+  cattle:
+    systemDefaultRegistry: ""
+  hostNetwork: false
+
+capi:
+  enabled: false
+
+mcm:
+  enabled: true
+
+preDelete:
+  enabled: true
+  image:
+    repository: rancher/kubectl
+    tag: v1.20.2
+
+# tolerations for the webhook deployment. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for more info
+tolerations: []