From 3771bd4ae60a18948d7f47807124f239dd54fcff Mon Sep 17 00:00:00 2001
From: Chad Roberts <chad.roberts@suse.com>
Date: Thu, 22 Dec 2022 14:18:59 -0500
Subject: [PATCH 1/3] Bump rancher-webhook version to v0.3.2-rc5

---
 packages/rancher-webhook/package.yaml | 2 +-
 release.yaml                          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/rancher-webhook/package.yaml b/packages/rancher-webhook/package.yaml
index 8048188a0..72f6ae405 100644
--- a/packages/rancher-webhook/package.yaml
+++ b/packages/rancher-webhook/package.yaml
@@ -1,2 +1,2 @@
-url: https://github.com/rancher/webhook/releases/download/v0.3.2-rc4/rancher-webhook-0.3.2-rc4.tgz
+url: https://github.com/rancher/webhook/releases/download/v0.3.2-rc5/rancher-webhook-0.3.2-rc5.tgz
 version: 2.0.2
diff --git a/release.yaml b/release.yaml
index 14e59a9d2..5663dd33b 100644
--- a/release.yaml
+++ b/release.yaml
@@ -55,7 +55,7 @@ rancher-gatekeeper-crd:
 rancher-logging:
 - 101.1.0+up3.17.10
 rancher-webhook:
-- 2.0.2+up0.3.2-rc4
+- 2.0.2+up0.3.2-rc5
 sriov:
 - 101.0.2+up0.1.0
 sriov-crd:

From 2786f790c1f9599b5fd517bd2c988d1a27d2dd95 Mon Sep 17 00:00:00 2001
From: Chad Roberts <chad.roberts@suse.com>
Date: Thu, 22 Dec 2022 14:21:23 -0500
Subject: [PATCH 2/3] make charts

---
 .../rancher-webhook-2.0.2+up0.3.2-rc5.tgz     | Bin 0 -> 2715 bytes
 .../2.0.2+up0.3.2-rc5/Chart.yaml              |  18 ++++++
 .../2.0.2+up0.3.2-rc5/charts/capi/Chart.yaml  |   4 ++
 .../charts/capi/templates/service.yaml        |  13 ++++
 .../2.0.2+up0.3.2-rc5/templates/_helpers.tpl  |  22 +++++++
 .../templates/deployment.yaml                 |  59 ++++++++++++++++++
 .../pre-delete-hook-cluster-role-binding.yaml |  19 ++++++
 .../pre-delete-hook-cluster-role.yaml         |  25 ++++++++
 .../templates/pre-delete-hook-job.yaml        |  39 ++++++++++++
 .../templates/pre-delete-hook-psp.yaml        |  33 ++++++++++
 .../pre-delete-hook-service-account.yaml      |  12 ++++
 .../2.0.2+up0.3.2-rc5/templates/rbac.yaml     |  12 ++++
 .../2.0.2+up0.3.2-rc5/templates/service.yaml  |  13 ++++
 .../templates/serviceaccount.yaml             |   4 ++
 .../2.0.2+up0.3.2-rc5/templates/webhook.yaml  |  19 ++++++
 .../2.0.2+up0.3.2-rc5/values.yaml             |  28 +++++++++
 16 files changed, 320 insertions(+)
 create mode 100644 assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc5.tgz
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/Chart.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/charts/capi/Chart.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/charts/capi/templates/service.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/_helpers.tpl
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/deployment.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-cluster-role-binding.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-cluster-role.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-job.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-psp.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-service-account.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/rbac.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/service.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/serviceaccount.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/webhook.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc5/values.yaml

diff --git a/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc5.tgz b/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc5.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..5a12d3f2f9505627ec58727fdea54270db4e182d
GIT binary patch
literal 2715
zcmV;M3S{*kiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PI|CZ{s%d-`DyS0~LSdf4G$_*^a#@Tn|XI>D?Z7QzPm1a43oe
zEsbq96seMwx4AUm{UA}#mSbl(>un0p8z&Sw98sL#Ja8mQc(_98e8Blih?~Lrib(C=
zl9;`CGV(mnn~cZ#ujhH)U*GqqFZ}W7)c1#zY1ZzKhvUf$@SaYD?UX7_<O}bU=jz_v
zGa<sc&_q+gRbT;xL=z^KZb-Cd=u$BVQEIxN7zI%5mELYE8b!zhu(eFl?(K4u&e2(;
zR8;T)PX6{a_^v;3J;#H;g6|IVKTmpxauTCTNQeQLMn~N$jd5>hp#or(r@!`IO;E;E
zE2rx9@&o0O_@H`wm+H|Hd+1IJsfX^X?LtdrNEAAm@YUj#ie{07{!lVq4=s`;)xVxQ
za)*u#Ppt?O<Pq|aq6#brLct@d^G+d2sEeG;8AcX>nIvnp03;?tQ7z<c0Jd#Ks6t5-
zGwuh%XhbyS%d;q^Dx2}&MkH7W30Fo;(6<RHt6%hLF@~<^4*#4cwZLC`J0Izh)W!cb
zVJWJoH2}Nt-y8W|{2x!JNBlno(U>eT=wL>%DF$7|2he00z`E9VfSkcBWo#xG4Q~T@
zv$zy`CQ%{RmbGMJPFP`DG|Q&~FzEdn7bIo+3YS#r0;>R4Lg`D?AB4OKU_qEd%gS&q
z8(H98)gFg&t2r}1mX%0+jSMwzUMu7^QuN(&W~4&R^6TbieRnu=N0#*!Xu(h#TbW~}
zULh1q0}&=n+{VbY3)hIS(mGMWAm=AJYE+p?h(xFcq2M7VS`AdV!YE~wFCARdFk?K>
zgmUc=9y#@FgM7AFNCe6k!fMD7z>hy!Tts+{3_~qs0C)G6_0?A}lT=8mZ_gP~>XO6=
zL@B!D7=ac|ajm4=Gk*|YdSf2xAk@Wwjd8+=Mm2c9LYAOZu1-GD6zsr%Z+bfH;QwSY
zK0V_9A?WVTfe06rBiII&-$w?P-^&7*ZE)`It*j$mfct}S5Dc!D-fl0RSHluXxn6+%
ze`;WV6a!=mtAFfT9^}!+-&XUEI=kCtWR6T31|&%~UE7jVmr))mI2q73aJgXQzzt@`
zs~Lf0hAelbf?{mefQto&Isp4pTpQ@mBPEe!{4(gaFMdf0v$x+*Lkv{_zLBAAX6gv2
z!KwfGZ`c2ZiTFfsaEJbnMyKPB{!d3!@2LNWpk^3Kl0*&GzI8)+6u|51`CBn+5)n;;
zD$wlejY=@gu9myfI9M^!;p%O!bEW~HSL*=EZC8wI%$E^svDnH4pcEsc4q!Fo<xIUz
zr?p^dj1_CAxIN8OHJQRtqOK<|TQ2(+!l_3#prluz0stHCZr!!z0~d~KFVBwacL$V*
zERD87g$us{r#wQg;nh~jnoJ>wSJ2`=Bxe0ReuI9FEkRp8>lQg%$l4TjvQ^ZkOWrGK
zvqL55<N-lL!80EmWn)tyU)RsS+#}cDpS_zkc0~#IcX#F7N|QLbzqdDrUR<7i^Y-HX
z`PuBvgAAH`_5nWc&fh)ACJy6=xLlsSySSd6onLgBd@DuV-1h(riY&UqMZ2|VpAo$Z
zD&2LfoL$w|gkErxJ*7h5A8<NcxWB)<s~%)N*sVi0xW5lJE^D%c`}>n>#(uDB$<qv7
z?G1*VF3?=RL`bbR_eCE0HP)xvP%|NQ0Dl>eM;l|Z2kq<__-Z<xR#*1|w-VmoiIn$A
z+C({kIO}De;Xud9;O3R8P)(s+qa0*ES+p9W)T$**ONH`oA)bX{#<CYD`?Yx^60Ldm
z1*!E8-?&;or-pQ2+SdLaX}kZINOYn+jpF2cAY`f1C><#nI&;b+%9s0jhC9!HhMo9t
zI3D``(f>OHZD?STI%}dy(?^tZ61pVSD<SEBbGz!^yvl=)%5gk58|6wc{KjmP-43Kv
z?>4LQ_ga3!wotC=CyWhVbk4K@>=m-uRjWZZ(hi_CS?99z0qJt3?Evhd-E+B6i6plN
zb^vo+2wAF##C+P91~k(!M2s*p|1Jn+7+IP66c&^u^zTxn$pfou0c<SlK5MAb`Og>{
z(02+J*DYAKw%SLhvpkK%x6D3XnPV;YvTTM%1b#%>XGR}~|BuTE?85)kk=Mch;lvvs
z@&6FC5B_f=(B2l|c>=%xS%5!fSm1F9{3?JS!6xN7d=dLJ*U*NailZteQW>Hd5vMvo
z!7r916nsIKX%#w~A#0R#)7?nkWtHQ1e!W=Xx^%&G?aJ9NOX2JjV^w-)U!u+$%Z+wU
z5;CWZYKqD|o4qOak#he*6xe2U2Wx+hn)rj6h^{eAGuPe(V77VCUD1k%(koyhB31Cn
zyHV^BGF7|Rr)SHSH&&RwXJ`fY$N!(j{38>=JMe!v?bd${z3H+3>oD|K|9?(&xT<~q
ze~S5IF@7I+@^@niMo(l3ss#C*gg0WbcuQld0~qa0eedO=fBbS)Dcfe|e2@IirUZvg
z<(LMEneyr~efJ&zmQa>TJSN8vmK?9Mi92@))G1)Qd6WBQfNN~pkqhp2G+AN0E5_EM
zrMh3~IGhWv@mJkWd&`ucsedVy0eG#nZ5)#f8-E15s3x*sR!-PUupNgkc?K9<XlEf(
z9(|n`&A!~_*uC81s(p&vvA_LKRPuT3zd!EQe+<3p^qBuU2o;b)c=Uh|@c*Ccwg0K>
zMzlv1&cw#JWB6EykEMZ5BwbU6%eo4(w`9^ZzL}l38)k1_*9|p*nZPGy7{JL@)_TTo
zPx9mZx0wanemzYRhB0zYSP_mjyS_`6&bylvIZ61kdDb3N9)Mp#XH0$#U~+moI<){6
z%A`i0h@C_deaG4Dl@R({%Fx)HdMR3U01lj(BmR@;7|}hB_Q(IiD|CuT{}HxeSN-3_
z>(u`YN5j)&{r5rWvGHFO`E^bc{>VY#XTkH|39@Y0|2(hzB=3Rj(*N;jqyE=Fp8p<(
z4sf>nlt-TBAry&X${VMgThBPRRRFaBXcK?_u=c)7+x5S&_fG%;yYzoF9BtPBANBtr
z)KZ(SrQfaEEk$a-np*`dWtp6l{~1780H=vuqV811B~oY+3Kqck=d(tQLRlQwE->yb
z1pd-X`mAWD{y*N`-=JOk?|YMO{%7bP-~TxXJ&A9BRJmtM+x5Q;us*;2pPZg<+W%wx
ze-LWD|MNg0N*w~!ACM@%8*$z|rPvM@^_hiLY^~gHuO_|1HN_8QV%azhYrpt0X<~qo
zQRLdpSiDMZu<F6{(#EwdUlGY&4^#WT_6LoRA>_9zc-f`lz%0yJV|9X*pXpe|OHXC%
z#V;vc6Na0yNMktw6pipAe>+eGa4C4kN7EQZs;@B=JW>Jp-sgbXuKtHBBDETXB%x3C
zEudZc?@c%S|M9W@<1qB#XJ|avvl<_kS+}ozY0;1L1oV*pKUFSZXZ%0u*8lq6czD$R
zL(n7R|K<x}G=H^kBgxJYBZuVgh&4WjWe(K(zlD{*G~1Id=)O<4J$+ET8+S|&9O+0$
VI?~?szW@LL|No35uwMXF008lyOpO2l

literal 0
HcmV?d00001

diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/Chart.yaml
new file mode 100644
index 000000000..cf3726f27
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/Chart.yaml
@@ -0,0 +1,18 @@
+annotations:
+  catalog.cattle.io/certified: rancher
+  catalog.cattle.io/hidden: "true"
+  catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0'
+  catalog.cattle.io/namespace: cattle-system
+  catalog.cattle.io/os: linux
+  catalog.cattle.io/permits-os: linux,windows
+  catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
+  catalog.cattle.io/release-name: rancher-webhook
+apiVersion: v2
+appVersion: 0.3.2-rc5
+dependencies:
+- condition: capi.enabled
+  name: capi
+  repository: ""
+description: ValidatingAdmissionWebhook for Rancher types
+name: rancher-webhook
+version: 2.0.2+up0.3.2-rc5
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/charts/capi/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/charts/capi/Chart.yaml
new file mode 100644
index 000000000..388210bef
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/charts/capi/Chart.yaml
@@ -0,0 +1,4 @@
+apiVersion: v2
+appVersion: 0.0.0
+name: capi
+version: 0.0.0
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/charts/capi/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/charts/capi/templates/service.yaml
new file mode 100644
index 000000000..08df65d62
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/charts/capi/templates/service.yaml
@@ -0,0 +1,13 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: webhook-service
+  annotations:
+    need-a-cert.cattle.io/secret-name: rancher-webhook-tls
+spec:
+  ports:
+  - name: https
+    port: 443
+    targetPort: 8777
+  selector:
+    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/_helpers.tpl b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/_helpers.tpl
new file mode 100644
index 000000000..c37a65c6f
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/_helpers.tpl
@@ -0,0 +1,22 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{- define "rancher-webhook.labels" -}}
+app: rancher-webhook
+{{- end }}
+
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+  value: "linux"
+  effect: "NoSchedule"
+  operator: "Equal"
+{{- end -}}
+
+{{- define "linux-node-selector" -}}
+kubernetes.io/os: linux
+{{- end -}}
\ No newline at end of file
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/deployment.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/deployment.yaml
new file mode 100644
index 000000000..e4270c1ec
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/deployment.yaml
@@ -0,0 +1,59 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: rancher-webhook
+spec:
+  selector:
+    matchLabels:
+      app: rancher-webhook
+  template:
+    metadata:
+      labels:
+        app: rancher-webhook
+    spec:
+      {{- if .Values.capi.enabled }}
+      volumes:
+      - name: tls
+        secret:
+          secretName: rancher-webhook-tls
+      {{- end }}
+      {{- if .Values.global.hostNetwork }}
+      hostNetwork: true
+      {{- end }}
+      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+      {{- if .Values.nodeSelector }}
+{{ toYaml .Values.nodeSelector | indent 8 }}
+      {{- end }}
+      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
+      {{- if .Values.tolerations }}
+{{ toYaml .Values.tolerations | indent 6 }}
+      {{- end }}
+      containers:
+      - env:
+        - name: STAMP
+          value: "{{.Values.stamp}}"
+        - name: ENABLE_CAPI
+          value: "{{.Values.capi.enabled}}"
+        - name: ENABLE_MCM
+          value: "{{.Values.mcm.enabled}}"
+        - name: NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+        name: rancher-webhook
+        imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
+        ports:
+        - name: https
+          containerPort: 9443
+        - name: capi-https
+          containerPort: 8777
+        {{- if .Values.capi.enabled }}
+        volumeMounts:
+        - name: tls
+          mountPath: /tmp/k8s-webhook-server/serving-certs
+        {{- end }}
+      serviceAccountName: rancher-webhook
+      {{- if .Values.priorityClassName }}
+      priorityClassName: "{{.Values.priorityClassName}}"
+      {{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-cluster-role-binding.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-cluster-role-binding.yaml
new file mode 100644
index 000000000..ca439ff48
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-cluster-role-binding.yaml
@@ -0,0 +1,19 @@
+{{- if .Values.preDelete.enabled }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rancher-webhook-pre-delete
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "2"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: rancher-webhook-pre-delete
+subjects:
+  - kind: ServiceAccount
+    name: rancher-webhook-pre-delete
+    namespace: {{ .Release.Namespace }}
+{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-cluster-role.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-cluster-role.yaml
new file mode 100644
index 000000000..777392aad
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-cluster-role.yaml
@@ -0,0 +1,25 @@
+{{- if .Values.preDelete.enabled }}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: rancher-webhook-pre-delete
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "1"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+rules:
+  - apiGroups: [ "admissionregistration.k8s.io" ]
+    resources: [ "mutatingwebhookconfigurations" ]
+    verbs: [ "delete" ]
+    resourceNames: [ "rancher.cattle.io" ]
+  - apiGroups: [ "" ]
+    resources: [ "serviceaccounts" ]
+    verbs: [ "get" ]
+{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
+  - apiGroups: [ "policy" ]
+    resources: [ "podsecuritypolicies" ]
+    verbs: [ "use" ]
+    resourceNames: [ "rancher-webhook-pre-delete" ]
+{{- end }}
+{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-job.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-job.yaml
new file mode 100644
index 000000000..d3608f366
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-job.yaml
@@ -0,0 +1,39 @@
+{{- if .Values.preDelete.enabled }}
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: rancher-webhook-pre-delete
+  namespace: {{ .Release.Namespace }}
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "3"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+spec:
+  backoffLimit: 3
+  template:
+    metadata:
+      name: rancher-webhook-pre-delete
+      labels: {{ include "rancher-webhook.labels" . | nindent 8 }}
+    spec:
+      serviceAccountName: rancher-webhook-pre-delete
+      {{- if .Values.priorityClassName }}
+      priorityClassName: "{{.Values.priorityClassName}}"
+      {{- end }}
+      restartPolicy: OnFailure
+      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+      {{- if .Values.nodeSelector }}
+{{ toYaml .Values.nodeSelector | indent 8 }}
+      {{- end }}
+      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
+      {{- if .Values.tolerations }}
+{{ toYaml .Values.tolerations | indent 6 }}
+      {{- end }}
+      containers:
+        - name: rancher-webhook-pre-delete
+          image: "{{ include "system_default_registry" . }}{{ .Values.preDelete.image.repository }}:{{ .Values.preDelete.image.tag }}"
+          imagePullPolicy: IfNotPresent
+          securityContext:
+            runAsUser: 0
+          command: [ "kubectl", "delete", "--ignore-not-found=true", "mutatingwebhookconfigurations", "rancher.cattle.io" ]
+{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-psp.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-psp.yaml
new file mode 100644
index 000000000..df29bf8ff
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-psp.yaml
@@ -0,0 +1,33 @@
+{{- if and .Values.preDelete.enabled (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+  name: rancher-webhook-pre-delete
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "1"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+spec:
+  privileged: false
+  hostNetwork: false
+  hostIPC: false
+  hostPID: false
+  runAsUser:
+    rule: 'RunAsAny'
+  seLinux:
+    rule: 'RunAsAny'
+  supplementalGroups:
+    rule: 'MustRunAs'
+    ranges:
+      - min: 1
+        max: 65535
+  fsGroup:
+    rule: 'MustRunAs'
+    ranges:
+      - min: 1
+        max: 65535
+  readOnlyRootFilesystem: false
+  volumes:
+    - 'secret'
+{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-service-account.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-service-account.yaml
new file mode 100644
index 000000000..93e215394
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/pre-delete-hook-service-account.yaml
@@ -0,0 +1,12 @@
+{{- if .Values.preDelete.enabled }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: rancher-webhook-pre-delete
+  namespace: {{ .Release.Namespace }}
+  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": pre-delete
+    "helm.sh/hook-weight": "1"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
+{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/rbac.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/rbac.yaml
new file mode 100644
index 000000000..9afaae6c6
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/rbac.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rancher-webhook
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: rancher-webhook
+  namespace: {{.Release.Namespace}}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/service.yaml
new file mode 100644
index 000000000..74a8a9e5a
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/service.yaml
@@ -0,0 +1,13 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: rancher-webhook
+  namespace: cattle-system
+spec:
+  ports:
+  - port: 443
+    targetPort: 9443
+    protocol: TCP
+    name: https
+  selector:
+    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/serviceaccount.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/serviceaccount.yaml
new file mode 100644
index 000000000..f9251b418
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/webhook.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/webhook.yaml
new file mode 100644
index 000000000..4f95ae896
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/templates/webhook.yaml
@@ -0,0 +1,19 @@
+apiVersion: admissionregistration.k8s.io/v1
+kind: ValidatingWebhookConfiguration
+metadata:
+  name: rancher.cattle.io
+webhooks:
+- admissionReviewVersions:
+  - v1
+  - v1beta1
+  clientConfig:
+    service:
+      name: rancher-webhook
+      namespace: cattle-system
+      path: /v1/webhook/validation
+      port: 443
+  failurePolicy: Ignore
+  matchPolicy: Equivalent
+  name: rancher.cattle.io
+  sideEffects: None
+  timeoutSeconds: 10
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc5/values.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/values.yaml
new file mode 100644
index 000000000..bf8ec1831
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc5/values.yaml
@@ -0,0 +1,28 @@
+image:
+  repository: rancher/rancher-webhook
+  tag: v0.3.2-rc5
+  imagePullPolicy: IfNotPresent
+
+global:
+  cattle:
+    systemDefaultRegistry: ""
+  hostNetwork: false
+
+capi:
+  enabled: false
+
+mcm:
+  enabled: true
+
+preDelete:
+  enabled: true
+  image:
+    repository: rancher/kubectl
+    tag: v1.23.3
+
+# tolerations for the webhook deployment. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for more info
+tolerations: []
+nodeSelector: {}
+
+## PriorityClassName assigned to deployment.
+priorityClassName: ""

From feee1973322ac43a4af7d12c38d58d268c09d866 Mon Sep 17 00:00:00 2001
From: Chad Roberts <chad.roberts@suse.com>
Date: Thu, 22 Dec 2022 14:25:00 -0500
Subject: [PATCH 3/3] make remove

---
 .../rancher-webhook-2.0.2+up0.3.2-rc4.tgz     | Bin 2709 -> 0 bytes
 .../2.0.2+up0.3.2-rc4/Chart.yaml              |  18 ------
 .../2.0.2+up0.3.2-rc4/charts/capi/Chart.yaml  |   4 --
 .../charts/capi/templates/service.yaml        |  13 -----
 .../2.0.2+up0.3.2-rc4/templates/_helpers.tpl  |  22 -------
 .../templates/deployment.yaml                 |  55 ------------------
 .../pre-delete-hook-cluster-role-binding.yaml |  19 ------
 .../pre-delete-hook-cluster-role.yaml         |  25 --------
 .../templates/pre-delete-hook-job.yaml        |  39 -------------
 .../templates/pre-delete-hook-psp.yaml        |  33 -----------
 .../pre-delete-hook-service-account.yaml      |  12 ----
 .../2.0.2+up0.3.2-rc4/templates/rbac.yaml     |  12 ----
 .../2.0.2+up0.3.2-rc4/templates/service.yaml  |  13 -----
 .../templates/serviceaccount.yaml             |   4 --
 .../2.0.2+up0.3.2-rc4/templates/webhook.yaml  |  19 ------
 .../2.0.2+up0.3.2-rc4/values.yaml             |  28 ---------
 index.yaml                                    |  10 ++--
 17 files changed, 5 insertions(+), 321 deletions(-)
 delete mode 100644 assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc4.tgz
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/Chart.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/charts/capi/Chart.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/charts/capi/templates/service.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/_helpers.tpl
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/deployment.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-cluster-role-binding.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-cluster-role.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-job.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-psp.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-service-account.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/rbac.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/service.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/serviceaccount.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/webhook.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc4/values.yaml

diff --git a/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc4.tgz b/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc4.tgz
deleted file mode 100644
index ef5506def8711b6699bd1127b21618cd44d6ba77..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2709
zcmV;G3TpKqiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PI|CZ{s%d-`DyS0~LSdf4G$_*^a#@Tn|XI>D?Z7QzPm1a43oe
zEsbq96seMwx4AUm{UA|KmSsEH&3c<c^Tr89jz$#cHxC?25+1HlIv;Sp65?iXz9Le)
zw<KmSo{T)t^CshQ{_A;O``7pV=?i~6I`yW*(a4*=@ci-cbo2terxRf}rAia|!u#ZV
zwIA-85aC>CqN(62umD1$2@^{<Bw90csThPPHC<4Q0w~r>XSWrNBIE(sTBc}scDYIC
z=&VsHDtG`VfBPDI*Ppna<H29ScZd0(C!Iq%iBTma!~jgAqi&VPxU;iR0WiwbUpucR
zC}XOXQ}ufJf$~UvP@TO?_1F-5=uQi%hwiK0LQ7;w6grvk)#R0mW|4&cP%>Q)Es`YF
zzn(jChmH)#R)h)i2zf|R1(pM$;1Sh%r;sGnMNZ}nBMZRXBx|$)Bql;pE#z$gwrxeI
zLP--d?gzqXL^S2gvnZx2yW_u&NU#tRu8f$VZxd8jx9HVm3|-G1{y9x*fxq-}?&*=#
z#{V^8DXOP60Eh738~JVgKlR2v{vU&AOqLk5Fr!!$gSO%WXtE4oUF$nQ&R~`@HWQ47
zw*kCaTnastsE}*RS~4*wtS~K_<+lPb==~ZOBxU*vmsIHjs{mF)=}XifguDr0L6}0z
z%5W_kS>RpO9*6Npb7p)jE0Opb8EV|VR>*6l=z8SLNQIi^*UiKF?r`LeEbA-Kf}u3F
zGRI22LMWyNB21XLjge~?t`T9Sb)ten&QEgGs4|lfiBJtf!9z^68mMrEQOYP^I=H4`
z#(1C!<=P=Ua_YMc^1H=CB2c~%Rzr>ee*DSeBEoBA7-}H{xVyKkufBqrq(V}Cd(Mbb
zmn23YO3@|92()O5YbEWT`HT3{3$v%AP#ga>#t9=D)!_XKS%OlzI{8FXZ~*_k>FKbA
z|C7n-u*d&n(A}K_5iTf4unj7|j|?oomjy1{;N0I^Sx346_Xp!37+f#C-A+8Oh9#16
zy#V|F)WH5I2FMgv|Jb!W$fK>lt>zQ8R=3N@9GNl<NRn*3wk4-FqdZb@GN5hXa>2-f
z8_bMXGXlvBS?)>&#n`L?7Yht^0QRN0Hqf6(N+QYlWzcP3{E`x8?|z<!7^(n#Bg3Yd
zsUx5Ur|$Q^TmKs-;uF2W1NuMmr{k9XPe;?!UjL6l%`lWCi5jeZ>xS|ufY;Ugw_?;J
zBANtMpxM?Nm0*}%Emx&+uwtUa)!SU>Oanlt)&Z2ut{B(2Uq)<$#ZD#wr5G8l1xsVB
zMmdG#nyHG9!cd~F`Iar0UC-#$BfGJ%;kah_VY+U3vxN&<vM7MYG_;(!JD@ydX|zk}
zUHA<+<q>iXuWBwW$(l?d2TIW5KO|<|J${33jvIn*c%M7u+`!1DsFR(dHl6EENt+!i
zK_`0z4F%7<X_SpMfP7uQ?s7?7e}DFF)>s53aNpgP_g0$3$^E^(HT2^0?3=e2@6XR>
zZ}u{1W^4BFd3XM9FPk`w_i?#Adv|d?J3GH<Gx=7ExVg*$78F@@g^SJBqJ2j6DyX#3
zt+H=bUlT;ZN%ocs&E4ZZxNv`ecUQg0e6U*wUvPgPY+cr53HSFW)g8NGXG5N55NdBR
zY;}R={3SwawY@I#7_Kot)q<J{sRQ`Scs$w~lf7u?z`$42>9o3PVCtPnd6x)Hv;v5;
zUgqTtbes%sUa1P56v{QqLH3gclp#u84$a#_JPX5Yd?&bd>*Q8sSSwdo&{(h2t*iBH
zH`Me?+rFOm`G1K-C(6?(PQJiGmMV?Xk%FN!r#zy3`7qD$;Qr6B75@##Lx0lyf5)IL
zjW1GXrI~>|QmTDKIVYh@QoRzA{x`SA?#-(_=%^gWbF)yc1jBF4GCAx(I`wL^Dt~Xo
zyVw=VHNA_m!Kc=q7J$7%7Q1RS$VS=$Y}~AM+4+EUxzct3_R#LQT&P5nTM;{eIWB}O
zRYYQb+m{BB(=bGgFf#ux2xS;qnferVmn8J>Ql!bAS+xMRCiNk6sM7h*7#fS>6fCYc
z%z(AisyeOdX>7h_R`tqkYq^(YGc+Rb9@U>2eH{KjE+cRV|4&C=3;%}`-|zAN81xYQ
z-$tMZTZHEc{QhSF{*+;X$0hKq0Dc6Ul>6{S#MGQa8-6Obs+34&h-O5b>U;;kn37QN
z1zo09z-@-CQO-?wBYB%uj^Fw9VutI|1=F=HXSXaxa6yb!>A3q6b=Fuev~!Y>Ib~E+
zRPNdAO|g!Y`wybPHnTfe`*YO9AIwB_jbWOF5+-c3&5Le}R=ku>0TU6af=AwsVuz5a
zIy^reOSXKl!t^~uEBJ8y|5?mGG7)?L|A*6d{nyZ&_Vr)Kp~w3FbE3ml?d$(j%pZ&K
z4{;}dH<n=ZM3$gRkk3hYBNmIdG^RR$(ZSUBgFN()pROv=+svFlAYZgC!EsYZra@w+
zyt+*KeaF8gl%*2;l={(9>UFB};0l2{acnmq@}YU-8k-JeklP(iF4=C2v9oBY?pHbv
z=YnheRc|KCWy;UgzZA*<yp3dU9Fq(ie+0XzCbC~vPS{JZ9fvM?1{hpuXCYD^eVrH0
zzC7gEz1-odeTv)haQmOA<n!2nf84JB7<$ubpZ_}w6_7!Aw8sbd|4;SW|I~IPHb)fB
z#MZbze5}LA(m*GYt|`N1T?N@$GHDv$%+5C(W^Z2C4K;w7z$axGz{yqCdd6>0^6mV$
znFZQ?JxvmZF>*~<5so#xzDt$PyPJJHN%*q4As<s7fL}ppOnwbua(X&CwEz~%q(+~J
zokS9S$Jy<b5c*rn(Ab=MDmID*95^v`04L8eqI(=Y9RCZi&?zGQN7#Zx^?wtuRsS;_
z4JUp5_fhDv@n04BwRRK!$U)#|!Smk<vh3FXJg@sC=RgkW|9G@j|LgbrzsI2??Cn0~
zmS?#MMWUGU#xCd1J<eTqLmL3JjX!@_d*7zr`d`@lCxC!M`ac?uw(9@Kz5XACHq@qV
z=?|;+h9Yeq&8-5KvbfI4{|ulko6|%tQMYR85-GF@1q<N&^I4-tp)9G}EHLgY1pd-f
z`mE@n{y*N`-=ahM?|YMW{%1Js&;J~Sp2WBBRqol+Zv8I<tj}-%C#R>|=l}Zn|0uL^
z{%21iN*w~!ACM@%8*$#;rPvJ?^`3=QEUnycuWovUYl<Jr#IkW1)_(D0(!>BEqsX<n
zV{w$+VAbCJ(#EwNUlGY&4^vpb_6LoRA>@xLc-f`lz%0yOW3_{n@99{@p{KI-;+K@J
z3B&DJq%j=;ibi;mpAJ+3Tne7?(KJSp>T3)Ik5mA@_c>s;t^eVQNUa7TN$8V(3+Ryk
zd($odf85u99EbLPhQ@O}tMOr(_2!i?EqYH+K>PInsd51a<Nry!{@3@$(_a6NL6408
zo2Siaejsow$<7fYhvWy)8Xv<l8*1I(!pcw9cBBj1r|@>C4~i3YeR80uo_gx(!SufX
P00960^vZTd08{_~l=)t>

diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/Chart.yaml
deleted file mode 100644
index 60f6144ef..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/Chart.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-annotations:
-  catalog.cattle.io/certified: rancher
-  catalog.cattle.io/hidden: "true"
-  catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0'
-  catalog.cattle.io/namespace: cattle-system
-  catalog.cattle.io/os: linux
-  catalog.cattle.io/permits-os: linux,windows
-  catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
-  catalog.cattle.io/release-name: rancher-webhook
-apiVersion: v2
-appVersion: 0.3.2-rc4
-dependencies:
-- condition: capi.enabled
-  name: capi
-  repository: ""
-description: ValidatingAdmissionWebhook for Rancher types
-name: rancher-webhook
-version: 2.0.2+up0.3.2-rc4
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/charts/capi/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/charts/capi/Chart.yaml
deleted file mode 100644
index 388210bef..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/charts/capi/Chart.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v2
-appVersion: 0.0.0
-name: capi
-version: 0.0.0
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/charts/capi/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/charts/capi/templates/service.yaml
deleted file mode 100644
index 08df65d62..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/charts/capi/templates/service.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-kind: Service
-apiVersion: v1
-metadata:
-  name: webhook-service
-  annotations:
-    need-a-cert.cattle.io/secret-name: rancher-webhook-tls
-spec:
-  ports:
-  - name: https
-    port: 443
-    targetPort: 8777
-  selector:
-    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/_helpers.tpl b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/_helpers.tpl
deleted file mode 100644
index c37a65c6f..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/_helpers.tpl
+++ /dev/null
@@ -1,22 +0,0 @@
-{{- define "system_default_registry" -}}
-{{- if .Values.global.cattle.systemDefaultRegistry -}}
-{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
-{{- else -}}
-{{- "" -}}
-{{- end -}}
-{{- end -}}
-
-{{- define "rancher-webhook.labels" -}}
-app: rancher-webhook
-{{- end }}
-
-{{- define "linux-node-tolerations" -}}
-- key: "cattle.io/os"
-  value: "linux"
-  effect: "NoSchedule"
-  operator: "Equal"
-{{- end -}}
-
-{{- define "linux-node-selector" -}}
-kubernetes.io/os: linux
-{{- end -}}
\ No newline at end of file
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/deployment.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/deployment.yaml
deleted file mode 100644
index e5f70be95..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/deployment.yaml
+++ /dev/null
@@ -1,55 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: rancher-webhook
-spec:
-  selector:
-    matchLabels:
-      app: rancher-webhook
-  template:
-    metadata:
-      labels:
-        app: rancher-webhook
-    spec:
-      volumes:
-      - name: tls
-        secret:
-          secretName: rancher-webhook-tls
-      {{- if .Values.global.hostNetwork }}
-      hostNetwork: true
-      {{- end }}
-      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
-      {{- if .Values.nodeSelector }}
-{{ toYaml .Values.nodeSelector | indent 8 }}
-      {{- end }}
-      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
-      {{- if .Values.tolerations }}
-{{ toYaml .Values.tolerations | indent 6 }}
-      {{- end }}
-      containers:
-      - env:
-        - name: STAMP
-          value: "{{.Values.stamp}}"
-        - name: ENABLE_CAPI
-          value: "{{.Values.capi.enabled}}"
-        - name: ENABLE_MCM
-          value: "{{.Values.mcm.enabled}}"
-        - name: NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
-        name: rancher-webhook
-        imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
-        ports:
-        - name: https
-          containerPort: 9443
-        - name: capi-https
-          containerPort: 8777
-        volumeMounts:
-        - name: tls
-          mountPath: /tmp/k8s-webhook-server/serving-certs
-      serviceAccountName: rancher-webhook
-      {{- if .Values.priorityClassName }}
-      priorityClassName: "{{.Values.priorityClassName}}"
-      {{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-cluster-role-binding.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-cluster-role-binding.yaml
deleted file mode 100644
index ca439ff48..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-cluster-role-binding.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: rancher-webhook-pre-delete
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "2"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: rancher-webhook-pre-delete
-subjects:
-  - kind: ServiceAccount
-    name: rancher-webhook-pre-delete
-    namespace: {{ .Release.Namespace }}
-{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-cluster-role.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-cluster-role.yaml
deleted file mode 100644
index 777392aad..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-cluster-role.yaml
+++ /dev/null
@@ -1,25 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: rancher-webhook-pre-delete
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "1"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-rules:
-  - apiGroups: [ "admissionregistration.k8s.io" ]
-    resources: [ "mutatingwebhookconfigurations" ]
-    verbs: [ "delete" ]
-    resourceNames: [ "rancher.cattle.io" ]
-  - apiGroups: [ "" ]
-    resources: [ "serviceaccounts" ]
-    verbs: [ "get" ]
-{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
-  - apiGroups: [ "policy" ]
-    resources: [ "podsecuritypolicies" ]
-    verbs: [ "use" ]
-    resourceNames: [ "rancher-webhook-pre-delete" ]
-{{- end }}
-{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-job.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-job.yaml
deleted file mode 100644
index d3608f366..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-job.yaml
+++ /dev/null
@@ -1,39 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: rancher-webhook-pre-delete
-  namespace: {{ .Release.Namespace }}
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "3"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
-spec:
-  backoffLimit: 3
-  template:
-    metadata:
-      name: rancher-webhook-pre-delete
-      labels: {{ include "rancher-webhook.labels" . | nindent 8 }}
-    spec:
-      serviceAccountName: rancher-webhook-pre-delete
-      {{- if .Values.priorityClassName }}
-      priorityClassName: "{{.Values.priorityClassName}}"
-      {{- end }}
-      restartPolicy: OnFailure
-      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
-      {{- if .Values.nodeSelector }}
-{{ toYaml .Values.nodeSelector | indent 8 }}
-      {{- end }}
-      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
-      {{- if .Values.tolerations }}
-{{ toYaml .Values.tolerations | indent 6 }}
-      {{- end }}
-      containers:
-        - name: rancher-webhook-pre-delete
-          image: "{{ include "system_default_registry" . }}{{ .Values.preDelete.image.repository }}:{{ .Values.preDelete.image.tag }}"
-          imagePullPolicy: IfNotPresent
-          securityContext:
-            runAsUser: 0
-          command: [ "kubectl", "delete", "--ignore-not-found=true", "mutatingwebhookconfigurations", "rancher.cattle.io" ]
-{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-psp.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-psp.yaml
deleted file mode 100644
index df29bf8ff..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-psp.yaml
+++ /dev/null
@@ -1,33 +0,0 @@
-{{- if and .Values.preDelete.enabled (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
-apiVersion: policy/v1beta1
-kind: PodSecurityPolicy
-metadata:
-  name: rancher-webhook-pre-delete
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "1"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-spec:
-  privileged: false
-  hostNetwork: false
-  hostIPC: false
-  hostPID: false
-  runAsUser:
-    rule: 'RunAsAny'
-  seLinux:
-    rule: 'RunAsAny'
-  supplementalGroups:
-    rule: 'MustRunAs'
-    ranges:
-      - min: 1
-        max: 65535
-  fsGroup:
-    rule: 'MustRunAs'
-    ranges:
-      - min: 1
-        max: 65535
-  readOnlyRootFilesystem: false
-  volumes:
-    - 'secret'
-{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-service-account.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-service-account.yaml
deleted file mode 100644
index 93e215394..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/pre-delete-hook-service-account.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: rancher-webhook-pre-delete
-  namespace: {{ .Release.Namespace }}
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "1"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-{{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/rbac.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/rbac.yaml
deleted file mode 100644
index 9afaae6c6..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/rbac.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: rancher-webhook
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cluster-admin
-subjects:
-- kind: ServiceAccount
-  name: rancher-webhook
-  namespace: {{.Release.Namespace}}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/service.yaml
deleted file mode 100644
index 74a8a9e5a..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/service.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-kind: Service
-apiVersion: v1
-metadata:
-  name: rancher-webhook
-  namespace: cattle-system
-spec:
-  ports:
-  - port: 443
-    targetPort: 9443
-    protocol: TCP
-    name: https
-  selector:
-    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/serviceaccount.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/serviceaccount.yaml
deleted file mode 100644
index f9251b418..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/serviceaccount.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/webhook.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/webhook.yaml
deleted file mode 100644
index 4f95ae896..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/templates/webhook.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: rancher.cattle.io
-webhooks:
-- admissionReviewVersions:
-  - v1
-  - v1beta1
-  clientConfig:
-    service:
-      name: rancher-webhook
-      namespace: cattle-system
-      path: /v1/webhook/validation
-      port: 443
-  failurePolicy: Ignore
-  matchPolicy: Equivalent
-  name: rancher.cattle.io
-  sideEffects: None
-  timeoutSeconds: 10
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/values.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc4/values.yaml
deleted file mode 100644
index 53d062873..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc4/values.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-image:
-  repository: rancher/rancher-webhook
-  tag: v0.3.2-rc4
-  imagePullPolicy: IfNotPresent
-
-global:
-  cattle:
-    systemDefaultRegistry: ""
-  hostNetwork: false
-
-capi:
-  enabled: false
-
-mcm:
-  enabled: true
-
-preDelete:
-  enabled: true
-  image:
-    repository: rancher/kubectl
-    tag: v1.23.3
-
-# tolerations for the webhook deployment. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for more info
-tolerations: []
-nodeSelector: {}
-
-## PriorityClassName assigned to deployment.
-priorityClassName: ""
diff --git a/index.yaml b/index.yaml
index d67b35308..84f65e5bd 100755
--- a/index.yaml
+++ b/index.yaml
@@ -11510,18 +11510,18 @@ entries:
       catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
       catalog.cattle.io/release-name: rancher-webhook
     apiVersion: v2
-    appVersion: 0.3.2-rc4
-    created: "2022-12-21T19:38:38.206154-05:00"
+    appVersion: 0.3.2-rc5
+    created: "2022-12-22T14:23:56.520407607-05:00"
     dependencies:
     - condition: capi.enabled
       name: capi
       repository: ""
     description: ValidatingAdmissionWebhook for Rancher types
-    digest: 753ba21701e9fc351e2eece889dfa9b0e7e86bfd8f130654c5e24444cdef76c4
+    digest: 0707f610b028213b4e9086e7e1a729224dee34293272af9bb79cf0fb90a985be
     name: rancher-webhook
     urls:
-    - assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc4.tgz
-    version: 2.0.2+up0.3.2-rc4
+    - assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc5.tgz
+    version: 2.0.2+up0.3.2-rc5
   - annotations:
       catalog.cattle.io/certified: rancher
       catalog.cattle.io/hidden: "true"