From 964a3f9aec2669dd373663ba55d0da6c47a2fa7a Mon Sep 17 00:00:00 2001
From: Steven Crespo <steven.crespo@rancher.com>
Date: Mon, 30 Oct 2023 12:52:21 -0700
Subject: [PATCH] Make charts

---
 .../rancher-backup-crd-103.0.0+up4.0.0.tgz    | Bin 0 -> 1774 bytes
 .../rancher-backup-103.0.0+up4.0.0.tgz        | Bin 0 -> 11553 bytes
 .../103.0.0+up4.0.0/Chart.yaml                |  11 +
 .../103.0.0+up4.0.0/README.md                 |   3 +
 .../103.0.0+up4.0.0/templates/backup.yaml     | 141 ++++++++++++
 .../templates/resourceset.yaml                | 118 ++++++++++
 .../103.0.0+up4.0.0/templates/restore.yaml    | 122 ++++++++++
 .../rancher-backup/103.0.0+up4.0.0/Chart.yaml |  26 +++
 .../rancher-backup/103.0.0+up4.0.0/README.md  |  79 +++++++
 .../103.0.0+up4.0.0/app-readme.md             |  33 +++
 .../default-resourceset-contents/aks.yaml     |  25 ++
 .../default-resourceset-contents/eks.yaml     |  17 ++
 .../elemental.yaml                            |  49 ++++
 .../default-resourceset-contents/fleet.yaml   |  53 +++++
 .../default-resourceset-contents/gke.yaml     |  17 ++
 .../provisioningv2.yaml                       |  23 ++
 .../rancher-operator.yaml                     |  28 +++
 .../default-resourceset-contents/rancher.yaml |  65 ++++++
 .../103.0.0+up4.0.0/templates/_helpers.tpl    |  87 +++++++
 .../templates/clusterrolebinding.yaml         |  14 ++
 .../103.0.0+up4.0.0/templates/deployment.yaml |  79 +++++++
 .../103.0.0+up4.0.0/templates/hardened.yaml   | 124 ++++++++++
 .../103.0.0+up4.0.0/templates/psp.yaml        |  31 +++
 .../103.0.0+up4.0.0/templates/pvc.yaml        |  27 +++
 .../templates/rancher-resourceset.yaml        |  13 ++
 .../103.0.0+up4.0.0/templates/s3-secret.yaml  |  31 +++
 .../templates/serviceaccount.yaml             |  11 +
 .../templates/validate-install-crd.yaml       |  16 ++
 .../templates/validate-psp-install.yaml       |   7 +
 .../tests/deployment_test.yaml                | 216 ++++++++++++++++++
 .../103.0.0+up4.0.0/tests/pvc_test.yaml       | 102 +++++++++
 .../103.0.0+up4.0.0/tests/s3-secret_test.yaml | 141 ++++++++++++
 .../103.0.0+up4.0.0/values.yaml               |  81 +++++++
 index.yaml                                    |  45 ++++
 34 files changed, 1835 insertions(+)
 create mode 100644 assets/rancher-backup-crd/rancher-backup-crd-103.0.0+up4.0.0.tgz
 create mode 100644 assets/rancher-backup/rancher-backup-103.0.0+up4.0.0.tgz
 create mode 100644 charts/rancher-backup-crd/103.0.0+up4.0.0/Chart.yaml
 create mode 100644 charts/rancher-backup-crd/103.0.0+up4.0.0/README.md
 create mode 100644 charts/rancher-backup-crd/103.0.0+up4.0.0/templates/backup.yaml
 create mode 100644 charts/rancher-backup-crd/103.0.0+up4.0.0/templates/resourceset.yaml
 create mode 100644 charts/rancher-backup-crd/103.0.0+up4.0.0/templates/restore.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/Chart.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/README.md
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/app-readme.md
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/aks.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/eks.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/elemental.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/fleet.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/gke.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/provisioningv2.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/rancher-operator.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/rancher.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/_helpers.tpl
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/clusterrolebinding.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/deployment.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/hardened.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/psp.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/pvc.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/rancher-resourceset.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/s3-secret.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/serviceaccount.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/validate-install-crd.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/templates/validate-psp-install.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/tests/deployment_test.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/tests/pvc_test.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/tests/s3-secret_test.yaml
 create mode 100644 charts/rancher-backup/103.0.0+up4.0.0/values.yaml

diff --git a/assets/rancher-backup-crd/rancher-backup-crd-103.0.0+up4.0.0.tgz b/assets/rancher-backup-crd/rancher-backup-crd-103.0.0+up4.0.0.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..03c1dee7f84bc4cdc258f7175ddee373942430cd
GIT binary patch
literal 1774
zcmV<K1`+umiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PI^|Z`(Ey&$B-Tkv(*OU{{WvbTCk?nUfC1x}mVMz6=9OQ)ihC
zMQS7!#2EJ72a2*S%hVq`vX=n5J`|y--yM&4yyNLCF((U<-5DnLanvQ!e?4Acse4Nt
zva@E$^E~frI86TcJTL#hcR3iG^@o=ip63k){o$F{A71q@&yd#;|5A#T#`4U2GOzsN
zUI<~%g~pl+u0|b%2-cX1phvLQ40=?&CLlGPQ}9P9wH4>I1@(R4BXq814Cl@%9EYGH
zOkjlUU{`_?u_U0nYN<4Y&etR`zzVwN^|cHcd+p$eeg>(i;3M>K(ZNx){&U##dS1r|
zMI?=MGW3BfjTuu&F93}vHww*#%)$0Lh0OFaf)T<|#3)JB)_GVl>w5#k?uR(CZ2#}A
ztwj$1*APYwYf!IKZ9MfTDEI%qH}I}<{{P17U$y>!3d%YUjwn28;N~yYyZ=!c_j~Af
z?kV?2XdEjo!b$3~H!!E1CJqpS#y-~AoFCS2tlg;I+P^pM+))t_Gc%APjz-8e#lj@#
z5ki*v&k15O5V2Tdwq}xyDawPGVYwRZAf$*eo;qf+(#e^X`e_2&McDTf=`s5xDc2y!
zg2f?EnRd}vCHN<-7bDbD8tYi~lok>P@KL0Gj}o#A&JEf_LTO2PP>5$Gy<0}G1(g}7
z1v94%%$wWt828oPjMggAA|UJinu7j44>{R9s|C2SiXM@W=;n@wpfnDnE!gW|d$m5+
zP`FkixZO4N=TG0h>zOy+zCE7+_Lt}1{nZOWDI9EzJx$&$lGx69=vyNq3kdNjohu^X
z*PlLo9!$4}5sIXUOiWxEsHK%zZ^%8*5O5-wNjMq{KBvJHh_o8d&qQb|c9|(i%#+Y%
zUqVE1jVY%*NJcl%=E<A}JAgc949^&hkcregk9SnGp`3N>A#28V(0GEhK(T@(?#{9n
z+KiAIxK(Y;^{$K|<ur`L5$YG9n!_MS4vZ`r+wfynwdk=Fd_C7D7C>TY<lH*1vILJf
zj9kbF-K5w;su6niE~GxE!9u@sOr2`XeJp)Mq_K!uVvuTtJmjJ8&A$e9oI443C9i-k
z_KXC5;2Nz2tp+wUi^+YF`R>68l`CjPM1pUu5wkKEKMh}-d7pqea6b~%<$K5DHNHLt
zx4B?G$Ww5lT$ytN?mkYZ_te~H=zLks*doq^V1RkSED3?rSDO~zP7t%NKy<;O;&>?G
z@0d#Px8>{RV@{_An9UXH#^OyDw)ZhsqKZwTvWrSJgwFG+>hxk*={t$JqN{YOXg6!^
zW#vv9et$$JAv->=G<7>J6A4%qyFfEMT-Mh#5AC$p<~WqPa4o06QsQOq+3KRwq@NiR
zopKzhh0u2ntsjoe;c<<8?TBTEBa4{=`2hYez(E!yP^GEp6SJ?f#4Zj)EFFR7P)MgG
z?F?FdWU$jEW=G=Lx>B$bFLgEa&%ZCD)b=c?wEnkNIXvlmKt=uk>gqCA|GV(|gMM58
zI|Uu3{+F?vCX0ai64a^^m}O^Ai*-3L^QgKe*jzP;2(G1I4CDmnAc2#7Qs>M9%QC>s
zMma)uW!Ntb`R=gX1Zv@}^J&l$lJ76hJgY2rZi-k<%T$;%m4Lc)rOlOx0ZB?f&)0C^
zk+9f@Un%#Udr^4Tsg<Z!q^UJUcjcmM$yY~;xm->lfXAqLCEdR~?Ia=}OCJo+fE8GG
zP5i2>a)>oq+&)GUlycv~EtTv*9X6Kkp`<iZYdIULQ5!-w97(K2NiFI)d>=52%au{7
z)4fHjE!+VMc3c1UoPvAs9vrK9CD!`UctxS!vY#ufZL+yS<R0rQ)KhsmVU;8t>$F)j
zcwtAdJV9j2@_13|IV9UEDlu>JqsruL7oxkHuDz@}N7emb3kgqc0IInEzwri_`Tn1a
zVSE2S2_5VHZ|tVwyT5_V-}@6byLbL{YU4dX)=Q>|z^QlI728gm?$(nU4L26=y{m;M
zMKsT9;kErX72o*YAL09h4-D+*F%j!27=1ayWr!cso)fPC++D5Mr%&kcHPC<y3Aa)@
zFJon&mLnPSLq%~Tww)!Y?JQ|KOOD8??JP;Ci=3gi6zh=2l4(J)xos_JTTAxk(YBTp
zl>?sIQjy*m#v+UuBp%RcFG<^0(b97zNBw7VdwuiUZ7=kj;!*Yc&;G@m{O>>e!}j-I
zC!uf9#9BaFa6se9O{a6c9wiGbHPQ>LP3oBY<z%eDN3$jRvTa3QdhN;4QcEqh^xWyc
Q00030|B4o+9soiB01cjN-v9sr

literal 0
HcmV?d00001

diff --git a/assets/rancher-backup/rancher-backup-103.0.0+up4.0.0.tgz b/assets/rancher-backup/rancher-backup-103.0.0+up4.0.0.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..7025967b527faeac50dc18a3c81252c149382810
GIT binary patch
literal 11553
zcmV++E#A@}iwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PMYKbKAJGFnqqg`V}Z8_njoylqtzeqG!(3Bg>NGO}4c;cFrV$
zNJwHt5exy!mgA|q-|xS?zvL+_+(|9Aqh!uCYHDJUK%>#<Zge-mh662agdC+0wXth&
z)<)2wg&CZf|9HBhs;auPwZ;EcRW<%^iTz#N+GhWj%f<3P)Z&&}-u?$rpAd)4;t~p-
zf2fb{D?YftNr9GyDWnFrNF@h=1}QZ0u%JOoO;j-OCUhxQ42w``niUXb7e#aQe@-CP
zMyX9T<WOT^Al+}5T1_{IZNiyi!3nB>mZ%B#cn>7C#n|m5Wr`ePV5<Ut`{SRWSSXbX
zs-lA5*`IIOpTDIxWt|WkYN!IlL&ZS^yN-s4LS}@bNoq4pD!?=>_crydjhu-=iQ?DV
zxG^jp-=t%2J9uj7h$zFUQvrVWL5+g{4AISLF%^h65fLhs3U4J5N`-gXG;olKAVHGg
z(J4)BKs0Ql3Yb6(4$%ZzG_@9;u}Yfh5{ev!Vr-^Xa}7nq6B}E|qD%Ge+Jrg?PJ*$P
z3dKS(2W_M0J(-qr(6;@bTLrbC=5$0f$FM1XbS|k5VBateIs+5~)+ump04<%(1H}#k
zbcB2!gtl!O8kY{>xRzyD!yEwE0??X)W4DhS3sFS8G3N}8^)#Z?CY8-ijp<TSkR#->
zL<pi})5JqeHl+y3ehXwe%#G3P20J>b<dksVB&Ptw8aR+p$JMCopd6EcUYY>>mP?&g
zpL9jF%xLqUt}SR3)BjUwx`;gS0<b{;Z|xR$<NCi`+<Mmk>nO$q4iVG*4ze*ZD0XH(
z^Tb$G!8URr#Y~G+IIMuFV4>WL7hoR^pleb<%AoIRV?@CKJAgGatRaA=2?Q)KFia*e
z4uTZvpg-gCmemg_Gt7_$`zBjN2GArZ2f&LL41kU-YCyA%GzZZpoFHHf06}yEkP&uG
z9rT4TGkE}b!2cGNfrc##4JOW@df5&EBLxAzgMmvBIINz67B<la(6RL!WzYc~83YUr
zWa>;=rJzv(`FzGJx$yA!4jOWS<Ua(>Lahhb)R7~9AWOHg!L()MXRRt97#2aA>!8j_
zyFE6T7BmJkk6dha95fJWsj|t}PNBB=+KV-^=@R59L)Xv|Tgiw)D6*(B#ilz!WRn3n
z9031~hJZo5N!bA2WPuyQH08ts2+n&oaAVLBm|)kU=a7!T<`g=crqP#dMRFmKDf295
z;&1?TG%zgI72^&#L^Tr<B53t{_|YGJ3qDU6<du9{qkMh?+>8uu1ayP2E(y?Q7MvIw
z;7c=8ltR-BXs#tO0IwJi>4Mc?1IFN@Bg-|-4PfC!XMos90|pVWfM8E;gfU^f7lIb_
zjGO`huZDJstuxijHX8x7bm-^+TOOQ)<N5|?-Txn)*~n^BsEuDs-ff`)a{NUoWx6$N
zX~?EzQ(~Jo=`S=k1f|G9=0Id%6-L-#dS=)KH_+mQkOWPoClhvpC}n?!!O58du#cx`
zLx5!qvImnwXNV|(z=jSrG}nX<IPYx$X+}llTh<k$$N~9>FINKinPtuZvrVC4fp!QJ
zW*nF%zG1e2amVmH?~(sAm!N$U4>wC{@$II%yICx4dM%YCO%<0-x)QYCWOOy|Pz96@
zj9l&osOmZ}@er73icByt;gEP%N}wHcI_kSaPe`c4HHs(d9Lta7Pez<uMs8<{9ALAt
z=>aI9nFcfBUWjVGYWSTg0!Ge1{_pRs4YNi5sQm6a<{y>cZS2rLSQi?eOduf0h7Q-^
zra>s9zm6x+um}?i!v;{-9mGjWN018TU}4JDDw`?ZbI!u&0)t{{m#rlQb@S~;Q4Rjw
zEftD8{7130QGCaKy%j%qHVR~_Z4{*KRWPvz&0KD1;yyH`D??4LSO5@~y<DVPXlM}1
z);X>{0kDZJs>O8>cmdAa=kg)5d%dN_lUj=XMTyO;Moj@IZ84P<_<ON@77L|f;T_k|
zO{^ne!agzyUpZ~814xK5w79t~#JVz1szXZL!a7n2GLgotN2b7Y>`|LP!A=Ey|BH8e
zB4>`h1WXzz=QoN?rqU63<)Ck_;UE&Wb-As%^ExMMamNvS{4<w>gMncgbSA(v)-yCz
z)ikF68CAlbCa+>U26hZOi>PMCVP{k1I83y;adPgO<~cSEZN@3XpXFWvY)ep8^9Ihy
z256!wayG!>po!_ZgNWd8Ip=&}qGm1zwF2_uMV=GojKhT{fQ|!aj68mQv5=Fn`CvQ7
zl#$AjJQcPjmYFpQ$(U>8fiZL)q}W(jBzWX(+OBCTyn97<q<9@|=Hh7aSy<Wri`oAa
zO>7e~<@9-kOs2#N)PAfhu*m-3+AhcJ|DCO^ooD-h9p(FXMH*NjFSO)msoXw$td<AL
zUw`FTMPmR8J>ek=J?nYtsruD#W;=#O2O$3+WHbLD0Ep>g??*ns2U&XJ@7(wAn{RTL
zBL3oe=3@PUdPs9Kb;lJ757=-WNH#!@)#)Q<1c>J$HOExQ4R*#RhB{LM(#Ig$2<fgV
z7FasM1cgE7-fT()Ju35;3fIvg;9^h;7$c^T!ht8YMsc^iBHMBwU@$-$a|oKaE&FGW
zJ!8BA^7U^nH1l!Nq@qFO!VsBgf+kbs)bPZH4g&e#i-qErqUJ%N25k{SF%T&n2XTnP
zfkEY;98MomScs~;Ac_{5)wz{2r?}?18s3x+T+^HZHf$br1kkp*aahP*B0wG2(s+Fe
zcFI5-L5F}o(jYTP2%ezu8plma?&A@_MsFGugL)He5b#R+t^3V3tII7~8)>f#$=Mcq
zwIzc*3`GV!pmae*+_|%GFR*0zu|JJT+Z_yyTW%ePND!w0k249JncXZyJpdABZ23O6
zsKrf;g=q4+`4st8{)6NrD9gXSdB10tj|nvd^8c9!`Oo>)$Al*nY)MmS5uT!!Ky-x6
zNr8++)U5)(e+P!8nXaBSxPs_DtClAdC$ftI2<bpE=&B!ZWbdGD$GF{(xqbhh(&Qd|
zb1_9RA|#=RpsTL*X97@51aAv%VPK^a(X;fHBx8K6N-82Eu9!`+fVT_jBjK9}%-4^M
zgR{|Jf8|o*;G2Oui}^s|5l3Vp9`KQ7D1gEaWfJTXw3r}a<Fy$Q*d+%a!!NU+au6F@
zO5F0KoPP=-6T~|2)daD)XA0!DfQ*I<za3caq|eN1*D?_y0ES#@U=T1grpQ{TPwc4{
z9ilPdy?C}jC=gT#!B5a5zhsMuy$~j+o{uq}|EuK<I7+WD>3+7U_Crdh{Vy#i2b-vG
zSh`^iAG|BD!2VZv%B86NUs89~;<Np~jxshZy#i`tvRl|hdt$O9yK7D#Y6a-h5q69_
zZm$-`Z^ar{%uNu5I;4>K_$#gvKrT=sXu=gkdOOo!h3|o7Sj@u)TMPnm`(Kep`Hq<w
zN;{&vm%u4a*-Pv~o5k@Zi$CV;7B&&{@^b(rXzBOvZHhvDVpur<pluvD*tO@7c1`Lg
zQ~q^in|L-s*5i+ZERg^0vKrt2+b!<wKFj|)O3G?X$^{t)O<iuicXD+cK*I$2e_8*s
zYCOUR{9qR7V>$w)%z>ZxB0GX|3n*@$gq04oZNl`6kg9#39UrG~mJ#VEP)jz_SZmL+
z7LfQ!nUfIcxxkYiNYKfSK+}^}2|h#@R?J9G5AN%&=!=!uVIfhp5z@xQooteFWF}s5
z!wbADbR?FAJxCDW3CwSjvO>7&%au$1HSdv(U}<}YxRapA5O{m4Ef3$GYI7lb6U6^c
zEC3H&E_@;fVX{Q**squf-}(Rm#aD1*X2ZA#Q8w`Ul|qz?NFvxC)J%!PGtpSwFwv(U
zx%Nk+1QHtdV?y&Q4j}Mh%Xyp=h-8Eg;l|q*g3T82*I$*yYYK;n{=(7!@8A6hlD83%
zB)!~#2*H8QkW}JPQNA}9uBCvyqVT8rxLXlw#&_`&&G^$uGw(IBrj<}#LE_r`YOC|P
zSv{?{&#Se%|K5)t&e3-f6){L#2_nde4)^PgYWJk`xn2IeSFIg)&p)?2XRYc%{qxCL
zt=c&}Yo_9mC07w&xRAsvMuQX%$G5XIJl}UZ=bz78XCJQ8X|hcF_G17v&z5K{w?ZE<
z?)0@eYqrkot@dHNQ*YMlpX<%)-bsBwiB~=ZRFOdQel_86pECVN!hGl-^{9Y+{IEwp
z)QLdIo+|PfKrRfHBsn`#la*kDy~o?tOlV9hp$Y(K?9n29?#CuFSq{jju|3of#MD@N
zVhxSWTNs>-MaC3=q=v8b-^OgF09}6G#%t_t$A(sKZ-X{s5qN#3ulR|6BHO+hG>B|#
zEFwdAgC&&;;R=~V_}OOk-?n7>e<SGV$U^!PoCRIr|Lty-it+v5?H%>m|64~1dt80y
zp9C(~5$-?2*HUZ-O(Aeqr)y3Rnf_LaYm)aighm*T^A%uYLcQ-8HpDO29y(A*$?A%Z
zOhl1lbE_|30sJ9xH4Pyh=^LPr2G~Igf6R|O8rbrkK87<M3{H%RK`Wq`@Y5dddt_5s
zz|vf9sbh<xTN<c&$F-`YiLDmKv;wH(qUftGK~4n}RaKSG9mIr!dKNN2S@U;T1b@-R
zNm?Tb=P2SHJ!r~7#DVfbEbBkXGZ^w@TDBt<s~7XAQhch&A*_%=h9?uqRLjS_gq7a_
zdBw_aWax!plXL^*`Pf+lDKv6Vk3Eqi<<M;Q|L_0GLziN1kwzoJ9Xv+Xzw+{g-(UGZ
zbBdxwza{Y$U@VmUtP7Xdg>jnB-9bpk&7X$Ue|I7}t|{Ch#osU>Om^~r%0s4d$DBQj
z$^?;BrpW2@*F(gGLx|9y^AB^`#P%FXPKj9WattXr*jV@0AYREpF+5oLn0E<^wdTwp
zgp5|7YpHDi`s<O5=WTvH^B?EGU~6lc4Xb$@V5^fa*x6$&k+HY;nAurQ6*GQXL0ZDB
zCy2c{E%p(G9<!Zey)9)#ESAr_7BQY}$Cw%>8iv338eu}4h~8jl9DR6rUW-0BKim%<
z1h%bEHm->(;I~tk&{oJG{*7<boG=41QjgcES~LFMwQcbM05qi{Oa=LycnYmySe;D_
zOSl1|OyF$=>}+qBw{rjth!CqM0_Py8pIPRN4Xk09NEm_vNg^RO1^g!VV1ApUKP^Fb
z!x|>^rks+;v$3?^6#nrI`~Q+=lFu_trb6E~0Dy)LBK|P>Bf*ZHnH>!O(BjqPue$j0
zvmNp^m(2JN(`!%k8SsMmPqDPM6N~?B@2JoF|7$7Bu5I#A=vr4dVn1$So42NLU32ce
zs1psEP$UX?UUh!-s*}2P^IOK6#2N2rOUb`)$=3h!1jQ5du~7f3+j0HBz55*hUrSkV
z8aqq-`$ph-nk=uR_2V0`>ph_bH4PDRiuFK0wGh-V9fP7XOXC{dk8ud~m)L3zr$&%*
zQ3ri<5ec@(<^Hu85;5*j{QD2K21mY%51zk5-}p)X$oto#r?l(_!4de3DjbJ!U+LeX
zq?}iY9<`5tU(cY1-Y*67dH42bmrVWdy$I!^dgywv==}fo&UWJb|8DtN|F5G&Vx=jc
zVEKx^C118t+D=HETNHw5PQw;;uxTQPr_f;fF$ib-z2@aX-+Uw_Tmkvu1iCyuB)ZDW
zzVh)Hp8RT7rg6*rUzB;V0eM`HTeje(4e4kDy!;F*{{#hYwH6Lc+y{A{p=i^KNrc#+
zf0)m(*?c3;mhx3mtOqYW5QqxUq4lPe_<;3iPkN|i%765P?xXrxApfPZx)neFu~U5h
z{%0*E`^0Ca$tTWfu4Ln-9`0O^p(nBup4sr5i*kfIhBe%mSSJiQQU<<6Goqws8RIq5
z6MwN`WV8YEQ-Xc}4rH<w9po=Z$dc)ec=oiEv}NsbIMc`mfM5zuBe3B!y8;uJP|!zS
z`XoJ{j&f)QA}1L<(unkB;+dDqj16Bt4_SXP0O3?;kx^G;LkKDYg9P;k*zrFx@hE{O
zHl#-1M4qt=Ac<txl6jB3w<Z>e74sn6O9E#$PLYUBJoA#Wv2n`h+2ah7w#^--SM5iR
z(eER5gh4tv$)@4_a%`xH3aJc{nuJbN$;eN~V5hgrrfS50cy=EiU$WQ#$bo`K837CJ
z|K#_-YVkS#zn1dU2cI7KHEryxwTCSDaf>E`P$9I{ow4^FJ`}$gMoQ;@E3K3%|9qK(
z6nWeJisn4@EcoL6znJ}BDyr&p{;#!^7gAh?6udH#1zwpLGczJT@8DD(<U@yi@*vOt
zd;J=y+-Z0rJmLX%EuDGSx}nj~3&LDv@iLztao7~O-}5pF<4R3KVTy;gXX+){R)h_r
z*{`bShf;ZxP)%b1Mvxq%nb+4Vird`r0EO4G-v1XvCsKtvZn$SJYLNCz1~WcyfS2gj
zAe1nIOPCRiUZHP(6+W~GCV_q0^8Tu|_C@lmi9v{A4GZ90q=%9EKqQsIj)RDe`KdY9
zM5dV%M|`}hBG;`!#LGh7OW`(mc%dIZTSoq!%VPa+6Wdz@evJNCcjEVdl!|KkIsUtr
z@+0*B(q~FSl`Txct4!@$cn=B4M~|FrCJvkAU;7Y6R*FuL652}ysbfTVXCpWj>B16V
zK=u64k3;)v&r5B6-aaS5utEyW({{FlHH3Jkq<mC|&H4Lh&wot*TlMPxX}vJfpR$hy
z^1oZ&jpu(YZ#~C<*Hd1^F5JoGIss$bPjhEV_KhipTux+H|H#DY&sSci<e@=FZoi=6
z$>xH)C|-whZOi=7-k~Xuf{rLOOj5|@6jpM%7cX9b14Ka!*%%yJ1DyNv<x3xu5zipW
zq47kqo?r+{WZvl#YUSE&y=34bogGShiKoAacIKH<$y=48-EXE;P^_#AjDRAJRf`LL
zxNAMHySZJ>=_WDInv7VA1Kmvb4zOwB8*ct_-Dz_3Qy7l2E_-Z42Tl-04)M}9#*h$m
zz&MVMkm2|tPjOpKC6~Jg=N=3Iz`Zzgu^(LjBOcrX|DKZj+`ZzL(4Udt_qltJNHKB`
z*g(aXeBv#Lyj{SrAOK3?P@o!z$6oL^Q?*bmsEVT%d9%>w%)L)-6pIdfw28-o3!vsY
z4zj49AeOkcjU7rD07lzW!#X?@7zyV`_L;h)aSxhv?^TIzP!s^yDh2`2l9}6~DKhL9
zKznT1p=(vx;))#|IWk$Ne+vs>)(8XW4X6|J%y%_p_hGiX!C;JLWCMH=2Yrsw><b_4
z7qPj?fAb;d^Yg~*eU2FXz1qk%Xn{WBTF@8DLcC*t@1!OE@VY32J#nYbt5$f2pk3bJ
zmW<d?U{ClAzK(;9Y;lBVO+t-T_jfk-nAszL-57MljUK<%D{mST{e`w0>fWCWJ2@7Q
zG3Dao@aD<ZwW>s6XA2-p!#eXxtNh-MxzHkb1z@u_8U**X+b2vcjDfdu-G@XV?L3^&
z0#X2B=oB0f$Kc|dGf8PYr2OoeO$k5-<tu08G7^!QmEy>iIvW5xKsOwuQFG?E=T>Y_
zii;47Btixe`B{(-AO&CI`B}aIIlaE3vay~?hS=$`DB@CV*(Aw(V4!KvqIbd2G#tHa
zd3dt+J`(AxQ?kYd6Pu9+_8z1VAcWRZ@Z>2y&=N=akj^h_@nk0n|5a63K1>PUjF2U>
z>ZV<V6Jkw~G3p+)5tV-rOgQ9NMpqCJ9EXWai^v@%0EoX=1Q7eceyNLtM9O)?8Y*aN
zh+9U)Z6*8y3kGrX1y6q;!2SN0KsWNi{6jnA+4~h}>7md0!9Do+C-1{gee;B)@nG^!
zp+yZP)QcS3+--tt=oiJ@Or8bettT>7`%tspXQp2{yK$uucTc^P@4;M$jWt#;m%Bv5
z4~9BZuP`vnI6-;3dk@T)(A9unq@ePTC<wm+ieh<9P68P=Sko9<;;03eo%T6nMh8h{
zYgl2|;LEgFC~b>Xn%@Z(wcTs2ee!6p;f3bt<TW7Th8*EHSOe@#1VY#n;ZJ^bQOMDk
z1~e&vs!1?#9*4vxbr9N|K;{T-qFcxu7xLO$aYGgb;jh31TE+nJ0IppB7?M797;(D%
zqf8!)O?n&hi_J7|V~&+Sr|FW;0Y}U-B5qI&Gb_V2S%_Cg!$pJQ*!^tR`<E!O_z$!h
zpF(|to-hWqApWznvlajTV{7aA`;YaMx$z&N(Iep>4ce6F_LZiSG>6inKj8?`z`+w%
zk@zh=$B1_%-6L0CQ#Ub&`~or$DsPP~loCPW%L~wr0Y6|&(_>5x?0|{bkcuez5x()v
zLN<s2f^2LXQn6DEu<L-2%vuQayA&94Er(NJFa2;3Q~EX>BBBhiqY$@0LQqFe{H|Ya
zL$EcH=LC0<hNsAxy)Hy(@2xcgGvA~2uTCbFTuuQWGuD;|h0^%Z>`vGR7(q*C48U5j
z-d&sD<r*TguUh$Z2dkzxb;7(6Zw1YW&kWofGW~gCF3}J&SBOYf34r%!;G2t_nddu%
zFsPm%%8L#+fDN@V@50-l3?PI(DGHrFt1&Q4aoq)hQ$&D4eap%7?ewf;b%i9cBol|)
zQgI__AT5Rk+GQmat-(CWg{VaUahXv?_|2Z-pv(sU)38EGFTIZ{3t(TI5e%&R4Q`Mz
zY_#|lN%2u^fWFHt9OQ5Z5%To6(hc-XK<wSdH_x9H#vOv%NRCxN_B^@J1xmszg7XL=
zXnRP3?I1q05~Uj}{3QX8DzlZ}o8k>H;-6qmm~$XaCmq?y(vhVZjENAvLCBJQ5pN0&
z5^{RIh&Qq{XC`PM<76Ac#^sNh%5ZohH*wWeh*8B}5P?(4suPc=LKh%&R(FXU7hx`I
zsK1yI&ZNm8zHXFO_Q#L})PuH6@(`hc_-EcZ$gd(WxCW8}xG8Z^bV%Xm>q1VEYXVR}
z)kB|g3E${{^+mk=@>-xMZhj%c_2t*Lj(xsojy+>BUmimA;8(pe03ixUog9R63KA1P
zkj9`}0P0|bHGUCq_!2h%y}|yY$eHq+ofRMtckuCeD^qAd@^x}VhR@dia)B3aeo$QC
z7fJ>;ImKbU#oe6$<VVi_=fD0t*QU_ncjHFAAzo_(d_2cG@U|(zxy-IKcbWtLRyNyY
z-mLdSrf1oFEgZl;lM4q;@D%BRevWF{0`QToGNL(%xF+2IZ{A3zcjt}t%^UCvJ6veN
zz(Hi>Z$}vHQGzhuvhaF?3!6BLf^Kc3Nkw8Khb`tzl^B*HE=2PD6mFIHODWe)Uo!pZ
zFWxoIU$~?E1sDUi6pSDdWU(DIHLy#}nO~7QF8Wf){m*~>H={`I5Afzq6H`=q^CtHP
zIE-u#%UhK;c<k2$B_rM9YFtPFBm`>)j{|UISzYEO2YMwrONIpoaLPzJ01z;(Y9bjd
z5a28G#$52{GKRdk(Agv8j9EY-Q!6=5a_%`+{K{nJ^G^*3AovpY9lwBAXv$<#bTEOI
z%fo`2iJ-*{3xBMy8A};*@i39MPyb$Qw0Vb+00eypGbtyOEpnj<wTCZXPC1PSuERsD
z9EMQ#JP_kwOMHW!F?jVQ>QsK&hz(%_AgUE!7Z{~{S~+5(2^b=_e!1G%KOVp_+W@w}
zS;H3LS5Jl%29wl~CF&D{!;Oqs>{k%Zbh)n0)+KqF_B_t^E-2mzMRNF{1sA0-ny@2~
z&ag5l6M+#l2Z2uTtu=2)Ct?;zlth5SKk=0d=?pHYJP64uF>Z-#x2n#MoMG!R>J558
zHeY*}HcJP?Khcpn9|O-_kekQh3G##f!OZ(p<nQeGSA_;KFALp(^ihgH7Y_$UDzxRb
z@1*b}BNZ|Ke~FJD;h3y=4s7B1-(oEPbE&ko`+WX?EhX_Su7PeTvc##Y;J}wm?nhc^
zh;Ho)$QSatX#Ph34dW00NbSpfF5bg9dg3+}boLj*(W;+9-w40VhrcoKvpK}S3Qo;B
zsc^g$A>F=1oWNu5nYbi!p)2$RcG*4ufG*{&eGl$A6@Dzu=)-BA=>2C4!vE5;y8cH`
zt^d{Ct=+i(-!47Jf7eoCLXUo^c23tqXbH{x1nUx-zb^e4-Hv{mZb!>$*9XYImy>R3
zEwDiTOFO%9`>(vKmY(H*9pwkena>~dtiUI*==_cr+IB(BHJf%nwBu!zz~cU&z|4En
zi4dDa{NCBnLR3ycQiMGiB_2nC<$Hv-At{sSaW(c&spNguk|An7^+T*6s6Q|fqRRaz
z@$X~#OK|l4rv!uX@2x|rlz?}kY5mrA5RYW|R3D>R#vlc){k!CX3;y$mmiJJe>INV4
z)N#dC0S_L126yvN+ROV?KL48x^ojKU>gzv8U?mS=!TMh=7USRlmDOkae?4Uxc?mRs
zw%U7;0IsIk06@1q6+|l)0b^oghbk10k+qr}2a?RUn1ib-LsHwsG!Wdd=#G#%k=L07
zaD<FxYJ&`YkfISDy;wh%s!|msm#}o}gu8JQXs?RJ4_dU=g}^daSzJ`^KMf7~75AUA
z^JN4y%Tf~9{0PrGCJis|MOX6-q__Z0i_o-3nbwhH;bZp3A5h=5bQ49gNXB}J<MHFd
z(MyQo6VF-}ic(uV4!>moKYJZ}E)OfK+ke9`T0{I--FmkF)={2b+cW-{quC>`*A!tM
zj?qur+haZdoX}6S=gj$EUH-!#vQ10NsDefN|6AL!`+rJXyXEKj?^?>!%YT?Z!bYDn
zM#=<gBg689G2?CQarmcq_~=#<s3p})dhbi>nRzI#4&otgS8fxh$lNgEs=j&Z{CWhk
zO=yXE<Hy`y-g_@%KXu2LB1a|@4<7py_45AH2s%^5h9QWaj5aIMBk-<@dyqGpt|!9`
zqnLP@Wfm)wrwh9MLS=RR@3rt2m&Gf<Lj51V|G%_dd_MoRo)T9<-j_^kw$S2Cm9gOz
zujX$!J>jNSW*-lYl>JaMFG;wy*tHA0eF8%w!HY`<A?Jjvmzd?BEs$$257z%H!~hoP
z|E=<N-2X3^cb@aVt))EK{*R0s-hZ-{`%jv3|H&oDVgJkt9`f%$pK{A6=$(Up8N*`T
zTS9Z!i$2DbPzTz+Y5d90#71ld>d>ahx&IXUp=eMWp(WMeYTH5!D7VzgmpXt)?i^*F
zDPH@I(PJo-LYMV!Ir(EqHdF59NgDn|s3He7boz?R>N{)Oph~B6Sd-j;vK{;tX_O--
zQXC41t5QEXrXUN@+_Bh>fgOX+G!qgscQ}5pjzJB^Fh9aZN;|vs@?KIY5;=hsnm8JA
zNoGJ#;<)tTsO)_>z9TQMa0@IiHmMe-e#*7v?%eX{vP2Inp56&mJmX}mklG#VXeH$z
z4JhP6VhcYpH(At-2YTWYIA7L~jY*0tlA82B1xzT7{?g0M+y%Pu=E2jGhO{tOS3ghj
zv(2qvt|aom6Uyv=&u9P49z6C2!1?xnv0N&~@BiB^?>yiCv6ezygQ5!PAVR^uKkYgH
z9)L<t38fa{oRCvM^m53Y0=(P8a|-x8LZ*!zQlPe(qv8@|1sJsAeTPdB<r*RffY(hW
z(FXu*eRZe||Dta$G(E*&LprJe?^dFMgyqY75IRsiHIdrC$c+4iNO%Clm^7=W_4awS
zR!>2~vnBkinR9?W7d<3iRzRLnlmE^?5^Z85t>6JD@Ly@jga;DpJ24RN^KYKM_}n#3
zkx2jPk<`3Q$>gK@XCc{L7~v{UW|M+#vYAix*ekZ044RmpJBT2Q{s5}4GN33bDU;B5
zhrq-`6HSpB9u<F6;n&KnG6IPkS#c2184}q-#*8W;uP7Xe6tqRo(loUBo1cv~M<P{r
z@$C#CYic;y;^_>g&@p(rw5Sy0TgFCSB7<USx1bi(La|aVmfo(!P!AjzvZk?N`PPxR
z%k6!qbN>0fb@t&ZYBtTq`p2Tv{)O;qo@F58A)#)*-6*QTpSz_(afkmXmNts-*sr(Z
z=gvlfOtp=Iw`c2zzn14Mkx*iSb&+?<!o2Qk90!1f&t<JJex<Enf*-R99>X<Bw;+3S
zhBPKKd9O{sEFAZKy;1F+bUvTgTkXSkr{1j9Ki8Ypy_5QWf)t^FC~_c=k^+%T?vw`#
zv#{jZ!_PUqd^~%2J~o!TJym3ixcmyMq0DK=FiJ7%9t|_do+nav*Gy<kBAxid(AX<s
zb+zgz^=iAWFiTERlU&EEiu^d5ODLZ3v_FOhf`sJD@*v1aXkG#N^HzPo-Z*U5_m$q+
zN%yp#Pt*@5WskOKcg|YXgL>_x+HR+`Gw!?|4rTr7X}#K3&U@{{>-sOD6rMyl*2FN0
zsY<o{r;s9kb2g#QB1_q4o@k~g5ek=AnzSUS3dm1p1rM-TV=84;RrB$=;&B%qp?Qdz
z8Z@EEu`1wGdasL;j#dh9UZ%Kbq1^FLZ*+$<-lxxIG~W~^6<`{cdmBa6!ZhOjcnRTG
zLD(Qo*IbOT4?3xRgvwd6Z=aF8`d-hBB-Pk6;9m<VQjE6!2>IdA!v5p>Ez(?SU@K?`
zB9{tukTW6Smr7>H&wI}Uf4V`&bY`Q-yKt!Q(2BkC?gNTGRRAG601xAp5MfjJB%N%J
zA>0DeEhgR~^35e+76}6)CjGbILWif9)DZBG>Yo|1%7er~Xc&`xVoBiA8$3pX0n#Xs
z;>)=~siEXLLo&tCltQ=s&;y?~XcGH|Smgg##%SiD5=Mky-0Ho^K>u$`--qE_oQrP?
zJ?Bs~1Le8u-VfG@E1*{5{w39ZqKoWUR)9n@m?htN4Ck5Xu4&3B?hgoT#XHZk>BC6;
z>{$5!#*(`KV^6gw+4zxV(fP09R_y$5aeH@n`+5Io9VNW~bKa{(H+~+ytK$PmcYr-D
z68D22v-J~o*O%V<SqG-8?hlD83s0FZv<_T_y&Loyw+KMKg`j@v7!;jZsX=jK+^vPG
z9Mj-ffFo{bBVGg~hIQ${_<^{xA|oh8mG$)0=nJT+rbr~h^t4pZv`|8QX6^%qBT;MP
zhj6DU`<K~f{8MAgIU*X1lRp*B+q`{>5ygOJ4ex20gd-3ROo|`;s^O&v7C|XIqzJHo
z>qu*TVWc%QK~Jkt=5_yIX3V6)&o*$L%iNM`|NF;#p2iDUaQ<tnRNjrB|58iO`5)F&
z!uEf=EU&YUdI5>UUJvsHVqijwnw00QHo^7P6_B4{*AWl=V3@owI<)0Y$^|%qci4hA
zq@dx+GV9Xvr^ysjUfQep8;yAt=ftx=({4)tRmY!d&{D^+hWm^JsY6LxAiws2SxG~&
z0`kFQiJ)(>Wi{dqk=c^JUCQ8FK;tOKWuy5J;AuQPcQ~nBE-vK#g{FBGzLv-*IQf?w
z6e|KLzJo3PT#>>2L4_wgfR#GC4jLNR`h^Iw%Ir$y6SMov4GQp0(V_T$#3jlNB2+1^
zIKBR;!qXc9mO8&4g0<=|M2=PFI5dF7JpYn|3s<dGD<FT;R_RH*SZj6lqmHq+-|8K8
z+uiG<3$@X0@pme%jf+R^ZtFc9H}@|t^^<G0QEqpS_O4a)_@Ybg%f_|ctlN8i^=P}(
zt>3iNW=HGlo%ZG7U8~V(T#TFLUboS_7@J$IZfmcj9$6jp>iA;ZXm+}XciqYD*VAG{
zz3dz{bajNU)a@o5H_9Eg)zsBu_quGJ^&0hJuQdAF85h4@d>A!b^>MM&Ygwqf-R*XI
zAK<vr>GY2F^c%Z=T{P=Gv(akRTYK00d+@Tpb<=6+XRyx3adZU7jkAl1?r4`I2X?h>
z{cf*z(Q7nX<HlY`ZSHkDqrFboJh~V+tv37J?d{dRR=0GkSH37+sqOlRwn`Tzc-L!o
zCit#(x!pWFP}NSUWw*=PUHgFC>BXjb)-^v|jBjSWyQ}TX{p(v~?TwnH!_sNFTRKs<
zC#Tl<xNTiuHurnq&<ERWHTHJ;jiZ_N)wKI{`x5r9i_J#!+ojp~svo@jdO2y-V6RC|
z)Z6`jy|J&48?b9$O^@%IYNyfbT(?Q_djCqjxUes^?r8tQyguu9w{K6&^)l>TshxTe
zwtIF<D>rwJ)y6IC7TdaNpPlx4#}}RJot{d&TIuReEAP!N)T5Gqd3$s@xhB02y?Uot
zoz<*Xty7~r+K219rrP`Zr8#QW>(g%OsM#sKqrJ&#>C$S_&cXQR^sDan%lbjf)XS$<
z%WjWPw{`XQv{f%|HLWAudw;P7%e`su{nhcsha<cDb#Lo(OpR7|Yx|_wz3Z#RBI@>z
z`|q!3+W6g7yL9b#_q#X!@!Oep(1aJ(b**2vyPY<@y0%)=i=w{WwMNI?$>FxvXm(mv
z`}pFkIqB9L^yIF2tu^e^(}ULWRf*iTilcJ7+uG}P8@2vjv#FPw-HXds?ONTwY&Ys^
zt9xyAd)@8k`|j4|2lG^))JvzGBdb%iXSK=J)`ev@E=o;T>ovaW#fEj+ZC!T1?tQx$
zx9)WH-StIA+y2*44Rw3_SEcRS?qv_RtVXNXE!Nr}hR1<iT-PqT#pcD=X1jlIde{BX
zx;`E2`xnK=e!p~cd-<Wa-|f=9tCGFf>GJxA-EpyTVYc>K^+u~*d)K_^?7hDzHg8)u
zc3cMcnst-$dc9RVYF!swRKL@E%@3`M*8A%AMad>-AIy{1<-49<vac>LPfK01dZSN@
z2krN^+y8J>*1Nrv+Si8D8TXEwcT7%hil=qkZI|BFu2l1DZ@*bb2N&hefqvNUG;6K;
z_N3Pvm7rC1n%4C<_+fN(^`TYjUXDn+(d@y?!`b!MBhv1Sk9+mg+vZ(w)~wOiSz~;M
zOs&{58z0*H`pL2Sc6wE|k2(jVZDhPF!}qQIuGtu0l-`-`qW<A}+%WpHw>P@lYoo8%
zcg^u=+-n@&HE-<q+NF8Wyu7BD2lh@|HP5up-q+Ljt=YADOQG33){CQ?w$)Xyt>(d5
zU7KBZM_c`peRh1OA6*n1ZhJi3)(%>St)AVz=+d*3l5N+l!zr4mTP^dN>c#O?@9bH6
z{n|p8y^E{j^=1FV-nZ67EnlhEXYH}Jbyd2)($$MQt=_oleI51A4w_i&Tpysu-uuqD
zH@$3JTbg-#d{ykVPRAzfs;wiv*l1jp8`Jh(<G6jG*SeQCrPhZ%*zMVur<cY3*4T9P
z#@<c)0&_im((RqKYUw(B#pOJ*c!ihr=k?-wy?9<Pp4W@#_2S=sy-4-g42$35i#jLm
z_Smp{$T0@9U&y~%#d%8~OY#`sFFs^eQgN&Rky&B2l|O5^VIx3*{n^_i&*iy1m*?_t
TTmD}F00960<`(#R00;p98Bx?*

literal 0
HcmV?d00001

diff --git a/charts/rancher-backup-crd/103.0.0+up4.0.0/Chart.yaml b/charts/rancher-backup-crd/103.0.0+up4.0.0/Chart.yaml
new file mode 100644
index 000000000..1d4564ef0
--- /dev/null
+++ b/charts/rancher-backup-crd/103.0.0+up4.0.0/Chart.yaml
@@ -0,0 +1,11 @@
+annotations:
+  catalog.cattle.io/certified: rancher
+  catalog.cattle.io/hidden: "true"
+  catalog.cattle.io/namespace: cattle-resources-system
+  catalog.cattle.io/release-name: rancher-backup-crd
+apiVersion: v2
+appVersion: 4.0.0
+description: Installs the CRDs for rancher-backup.
+name: rancher-backup-crd
+type: application
+version: 103.0.0+up4.0.0
diff --git a/charts/rancher-backup-crd/103.0.0+up4.0.0/README.md b/charts/rancher-backup-crd/103.0.0+up4.0.0/README.md
new file mode 100644
index 000000000..046410962
--- /dev/null
+++ b/charts/rancher-backup-crd/103.0.0+up4.0.0/README.md
@@ -0,0 +1,3 @@
+# Rancher Backup CRD
+
+A Rancher chart that installs the CRDs used by `rancher-backup`.
diff --git a/charts/rancher-backup-crd/103.0.0+up4.0.0/templates/backup.yaml b/charts/rancher-backup-crd/103.0.0+up4.0.0/templates/backup.yaml
new file mode 100644
index 000000000..75ad5bf7b
--- /dev/null
+++ b/charts/rancher-backup-crd/103.0.0+up4.0.0/templates/backup.yaml
@@ -0,0 +1,141 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: backups.resources.cattle.io
+spec:
+  group: resources.cattle.io
+  names:
+    kind: Backup
+    plural: backups
+    singular: backup
+  scope: Cluster
+  versions:
+  - additionalPrinterColumns:
+    - jsonPath: .status.storageLocation
+      name: Location
+      type: string
+    - jsonPath: .status.backupType
+      name: Type
+      type: string
+    - jsonPath: .status.filename
+      name: Latest-Backup
+      type: string
+    - jsonPath: .spec.resourceSetName
+      name: ResourceSet
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    - jsonPath: .status.conditions[?(@.type=="Ready")].message
+      name: Status
+      type: string
+    name: v1
+    schema:
+      openAPIV3Schema:
+        properties:
+          spec:
+            properties:
+              encryptionConfigSecretName:
+                description: Name of the Secret containing the encryption config
+                nullable: true
+                type: string
+              resourceSetName:
+                description: Name of the ResourceSet CR to use for backup
+                nullable: true
+                type: string
+              retentionCount:
+                minimum: 1
+                type: integer
+              schedule:
+                description: Cron schedule for recurring backups
+                example:
+                  Descriptors: '@midnight'
+                  Standard crontab specs: 0 0 * * *
+                nullable: true
+                type: string
+              storageLocation:
+                nullable: true
+                properties:
+                  s3:
+                    nullable: true
+                    properties:
+                      bucketName:
+                        nullable: true
+                        type: string
+                      credentialSecretName:
+                        nullable: true
+                        type: string
+                      credentialSecretNamespace:
+                        nullable: true
+                        type: string
+                      endpoint:
+                        nullable: true
+                        type: string
+                      endpointCA:
+                        nullable: true
+                        type: string
+                      folder:
+                        nullable: true
+                        type: string
+                      insecureTLSSkipVerify:
+                        type: boolean
+                      region:
+                        nullable: true
+                        type: string
+                    type: object
+                type: object
+            required:
+            - resourceSetName
+            type: object
+          status:
+            properties:
+              backupType:
+                nullable: true
+                type: string
+              conditions:
+                items:
+                  properties:
+                    lastTransitionTime:
+                      nullable: true
+                      type: string
+                    lastUpdateTime:
+                      nullable: true
+                      type: string
+                    message:
+                      nullable: true
+                      type: string
+                    reason:
+                      nullable: true
+                      type: string
+                    status:
+                      nullable: true
+                      type: string
+                    type:
+                      nullable: true
+                      type: string
+                  type: object
+                nullable: true
+                type: array
+              filename:
+                nullable: true
+                type: string
+              lastSnapshotTs:
+                nullable: true
+                type: string
+              nextSnapshotAt:
+                nullable: true
+                type: string
+              observedGeneration:
+                type: integer
+              storageLocation:
+                nullable: true
+                type: string
+              summary:
+                nullable: true
+                type: string
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
diff --git a/charts/rancher-backup-crd/103.0.0+up4.0.0/templates/resourceset.yaml b/charts/rancher-backup-crd/103.0.0+up4.0.0/templates/resourceset.yaml
new file mode 100644
index 000000000..4b71d7ecb
--- /dev/null
+++ b/charts/rancher-backup-crd/103.0.0+up4.0.0/templates/resourceset.yaml
@@ -0,0 +1,118 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: resourcesets.resources.cattle.io
+spec:
+  group: resources.cattle.io
+  names:
+    kind: ResourceSet
+    plural: resourcesets
+    singular: resourceset
+  scope: Cluster
+  versions:
+  - name: v1
+    schema:
+      openAPIV3Schema:
+        properties:
+          controllerReferences:
+            items:
+              properties:
+                apiVersion:
+                  nullable: true
+                  type: string
+                name:
+                  nullable: true
+                  type: string
+                namespace:
+                  nullable: true
+                  type: string
+                replicas:
+                  type: integer
+                resource:
+                  nullable: true
+                  type: string
+              type: object
+            nullable: true
+            type: array
+          resourceSelectors:
+            items:
+              properties:
+                apiVersion:
+                  nullable: true
+                  type: string
+                excludeKinds:
+                  items:
+                    nullable: true
+                    type: string
+                  nullable: true
+                  type: array
+                excludeResourceNameRegexp:
+                  nullable: true
+                  type: string
+                kinds:
+                  items:
+                    nullable: true
+                    type: string
+                  nullable: true
+                  type: array
+                kindsRegexp:
+                  nullable: true
+                  type: string
+                labelSelectors:
+                  nullable: true
+                  properties:
+                    matchExpressions:
+                      items:
+                        properties:
+                          key:
+                            nullable: true
+                            type: string
+                          operator:
+                            nullable: true
+                            type: string
+                          values:
+                            items:
+                              nullable: true
+                              type: string
+                            nullable: true
+                            type: array
+                        type: object
+                      nullable: true
+                      type: array
+                    matchLabels:
+                      additionalProperties:
+                        nullable: true
+                        type: string
+                      nullable: true
+                      type: object
+                  type: object
+                namespaceRegexp:
+                  nullable: true
+                  type: string
+                namespaces:
+                  items:
+                    nullable: true
+                    type: string
+                  nullable: true
+                  type: array
+                resourceNameRegexp:
+                  nullable: true
+                  type: string
+                resourceNames:
+                  items:
+                    nullable: true
+                    type: string
+                  nullable: true
+                  type: array
+              type: object
+            nullable: true
+            required:
+            - apiVersion
+            type: array
+        required:
+        - resourceSelectors
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
diff --git a/charts/rancher-backup-crd/103.0.0+up4.0.0/templates/restore.yaml b/charts/rancher-backup-crd/103.0.0+up4.0.0/templates/restore.yaml
new file mode 100644
index 000000000..0f39ecf06
--- /dev/null
+++ b/charts/rancher-backup-crd/103.0.0+up4.0.0/templates/restore.yaml
@@ -0,0 +1,122 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: restores.resources.cattle.io
+spec:
+  group: resources.cattle.io
+  names:
+    kind: Restore
+    plural: restores
+    singular: restore
+  scope: Cluster
+  versions:
+  - additionalPrinterColumns:
+    - jsonPath: .status.backupSource
+      name: Backup-Source
+      type: string
+    - jsonPath: .spec.backupFilename
+      name: Backup-File
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    - jsonPath: .status.conditions[?(@.type=="Ready")].message
+      name: Status
+      type: string
+    name: v1
+    schema:
+      openAPIV3Schema:
+        properties:
+          spec:
+            properties:
+              backupFilename:
+                nullable: true
+                type: string
+              deleteTimeoutSeconds:
+                maximum: 10
+                type: integer
+              encryptionConfigSecretName:
+                nullable: true
+                type: string
+              ignoreErrors:
+                type: boolean
+              prune:
+                nullable: true
+                type: boolean
+              storageLocation:
+                nullable: true
+                properties:
+                  s3:
+                    nullable: true
+                    properties:
+                      bucketName:
+                        nullable: true
+                        type: string
+                      credentialSecretName:
+                        nullable: true
+                        type: string
+                      credentialSecretNamespace:
+                        nullable: true
+                        type: string
+                      endpoint:
+                        nullable: true
+                        type: string
+                      endpointCA:
+                        nullable: true
+                        type: string
+                      folder:
+                        nullable: true
+                        type: string
+                      insecureTLSSkipVerify:
+                        type: boolean
+                      region:
+                        nullable: true
+                        type: string
+                    type: object
+                type: object
+            required:
+            - backupFilename
+            type: object
+          status:
+            properties:
+              backupSource:
+                nullable: true
+                type: string
+              conditions:
+                items:
+                  properties:
+                    lastTransitionTime:
+                      nullable: true
+                      type: string
+                    lastUpdateTime:
+                      nullable: true
+                      type: string
+                    message:
+                      nullable: true
+                      type: string
+                    reason:
+                      nullable: true
+                      type: string
+                    status:
+                      nullable: true
+                      type: string
+                    type:
+                      nullable: true
+                      type: string
+                  type: object
+                nullable: true
+                type: array
+              observedGeneration:
+                type: integer
+              restoreCompletionTs:
+                nullable: true
+                type: string
+              summary:
+                nullable: true
+                type: string
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/Chart.yaml b/charts/rancher-backup/103.0.0+up4.0.0/Chart.yaml
new file mode 100644
index 000000000..02a7660fd
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/Chart.yaml
@@ -0,0 +1,26 @@
+annotations:
+  catalog.cattle.io/auto-install: rancher-backup-crd=match
+  catalog.cattle.io/certified: rancher
+  catalog.cattle.io/display-name: Rancher Backups
+  catalog.cattle.io/kube-version: '>= 1.23.0-0 < 1.28.0-0'
+  catalog.cattle.io/namespace: cattle-resources-system
+  catalog.cattle.io/os: linux
+  catalog.cattle.io/permits-os: linux,windows
+  catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
+  catalog.cattle.io/rancher-version: '>= 2.8.0-0 < 2.9.0-0'
+  catalog.cattle.io/release-name: rancher-backup
+  catalog.cattle.io/scope: management
+  catalog.cattle.io/type: cluster-tool
+  catalog.cattle.io/ui-component: rancher-backup
+  catalog.cattle.io/upstream-version: 2.1.1
+apiVersion: v2
+appVersion: 4.0.0
+description: Provides ability to back up and restore the Rancher application running
+  on any Kubernetes cluster
+icon: https://charts.rancher.io/assets/logos/backup-restore.svg
+keywords:
+- applications
+- infrastructure
+kubeVersion: '>= 1.23.0-0'
+name: rancher-backup
+version: 103.0.0+up4.0.0
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/README.md b/charts/rancher-backup/103.0.0+up4.0.0/README.md
new file mode 100644
index 000000000..59bff4425
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/README.md
@@ -0,0 +1,79 @@
+# Rancher Backup
+
+This chart provides ability to back up and restore the Rancher application running on any Kubernetes cluster.
+
+Refer [this](https://github.com/rancher/backup-restore-operator) repository for implementation details.
+
+-----
+
+### Get Repo Info
+```bash
+helm repo add rancher-chart https://charts.rancher.io
+helm repo update
+```
+
+-----
+
+### Install Chart
+```bash
+helm install rancher-backup-crd rancher-chart/rancher-backup-crd -n cattle-resources-system --create-namespace
+helm install rancher-backup rancher-chart/rancher-backup -n cattle-resources-system
+```
+
+-----
+
+### Configuration
+The following table lists the configurable parameters of the rancher-backup chart and their default values:
+
+| Parameter   |      Description      |  Default |
+|----------|---------------|-------|
+| image.repository |  Container image repository | rancher/backup-restore-operator |
+| image.tag |    Container image tag  |   v0.1.0-rc1 |
+| s3.enabled | Configure S3 compatible default storage location. Current version supports S3 and MinIO |    false |
+| s3.credentialSecretName | Name of the Secret containing S3 credentials. This is an optional field. Skip this field in order to use IAM Role authentication. The Secret must contain following two keys, `accessKey` and `secretKey` |    "" |
+| s3.credentialSecretNamespace | Namespace of the Secret containing S3 credentials. This can be any namespace. |    "" |
+| s3.region | Region of the S3 Bucket (Required for S3, not valid for MinIO) |    "" |
+| s3.bucketName | Name of the Bucket |    "" |
+| s3.folder | Base folder within the Bucket (optional) |    "" |
+| s3.endpoint | Endpoint for the S3 storage provider |   "" |
+| s3.endpointCA | Base64 encoded CA cert for the S3 storage provider (optional) | "" |
+| s3.insecureTLSSkipVerify |  Skip SSL verification | false |
+| persistence.enabled |  Configure a Persistent Volume as the default storage location. It accepts either a StorageClass name to create a PVC, or directly accepts the PV to use. The Persistent Volume is mounted at `/var/lib/backups` in the operator pod | false |
+| persistence.storageClass |  StorageClass to use for dynamically provisioning the Persistent Volume, which will be used for storing backups | "" |
+| persistence.volumeName |  Persistent Volume to use for storing backups | "" |
+| persistence.size |  Requested size of the Persistent Volume (Applicable when using dynamic provisioning) | "" |
+| debug | Set debug flag for backup-restore deployment | false |
+| trace | Set trace flag for backup-restore deployment | false |
+| nodeSelector | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector | {} |
+| tolerations | https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration | [] |
+| affinity | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity | {} |
+| serviceAccount.annotations | Annotations to apply to created service account | {} |
+| global.cattle.psp.enabled | Enable or disable PSPs in the chart | false |
+
+-----
+
+### PSPs
+
+We have added a configuration to the chart `values.yaml` which allows you to enable or disable PSPs to align with the PSP deprecation in Kubernetes `v1.25` and above.
+
+-----
+
+### CRDs
+
+Refer [this](https://github.com/rancher/backup-restore-operator#crds) section for information on CRDs that this chart installs. Also refer [this](https://github.com/rancher/backup-restore-operator/tree/master/examples) folder containing sample manifests for the CRDs.
+
+-----
+### Upgrading Chart
+```bash
+helm upgrade rancher-backup-crd -n cattle-resources-system
+helm upgrade rancher-backup -n cattle-resources-system
+```
+
+-----
+### Uninstall Chart
+
+```bash
+helm uninstall rancher-backup -n cattle-resources-system
+helm uninstall rancher-backup-crd -n cattle-resources-system
+```
+
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/app-readme.md b/charts/rancher-backup/103.0.0+up4.0.0/app-readme.md
new file mode 100644
index 000000000..b1406d5ee
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/app-readme.md
@@ -0,0 +1,33 @@
+# Rancher Backup
+
+This chart enables ability to capture backups of the Rancher application and restore from these backups. This chart can be used to migrate Rancher from one Kubernetes cluster to a different Kubernetes cluster.
+
+For more information on how to use the feature, refer to our [docs](https://ranchermanager.docs.rancher.com/pages-for-subheaders/backup-restore-and-disaster-recovery).
+
+This chart installs the following components:
+
+- [backup-restore-operator](https://github.com/rancher/backup-restore-operator)
+  - The operator handles backing up all Kubernetes resources and CRDs that Rancher creates and manages from the local cluster. It gathers these resources by querying the Kubernetes API server, packages all the resources to create a tarball file and saves it in the configured backup storage location.
+  - The operator can be configured to store backups in S3-compatible object stores such as AWS S3 and MinIO, and in persistent volumes. During deployment, you can create a default storage location, but there is always the option to override the default storage location with each backup, but will be limited to using an S3-compatible object store.
+  - It preserves the ownerReferences on all resources, hence maintaining dependencies between objects.
+  - This operator provides encryption support, to encrypt user specified resources before saving them in the backup file. It uses the same encryption configuration that is used to enable [Kubernetes Encryption at Rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/).
+- Backup - A backup is a CRD (`Backup`) that defines when to take backups, where to store the backup and what encryption to use (optional). Backups can be taken ad hoc or scheduled to be taken in intervals.
+- Restore - A restore is a CRD (`Restore`) that defines which backup to use to restore the Rancher application to.
+
+## Upgrading to Kubernetes v1.25+
+    ​
+Starting in Kubernetes v1.25, [Pod Security Policies](https://kubernetes.io/docs/concepts/security/pod-security-policy/) have been removed from the Kubernetes API. 
+    ​
+As a result, **before upgrading to Kubernetes v1.25** (or on a fresh install in a Kubernetes v1.25+ cluster), users are expected to perform an in-place upgrade of this chart with `global.cattle.psp.enabled` set to `false` if it has been previously set to `true`.
+​    
+> **Note:**
+> In this chart release, any previous field that was associated with any PSP resources have been removed in favor of a single global field: `global.cattle.psp.enabled`.
+    ​
+> **Note:**
+> If you upgrade your cluster to Kubernetes v1.25+ before removing PSPs via a `helm upgrade` (even if you manually clean up resources), **it will leave the Helm release in a broken state within the cluster such that further Helm operations will not work (`helm uninstall`, `helm upgrade`, etc.).**
+>
+> If your charts get stuck in this state, please consult the Rancher docs on how to clean up your Helm release secrets.
+​
+Upon setting `global.cattle.psp.enabled` to false, the chart will remove any PSP resources deployed on its behalf from the cluster. This is the default setting for this chart.
+​
+As a replacement for PSPs, [Pod Security Admission](https://kubernetes.io/docs/concepts/security/pod-security-admission/) should be used. Please consult the Rancher docs for more details on how to configure your chart release namespaces to work with the new Pod Security Admission and apply Pod Security Standards.
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/aks.yaml b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/aks.yaml
new file mode 100644
index 000000000..779742058
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/aks.yaml
@@ -0,0 +1,25 @@
+- apiVersion: "apiextensions.k8s.io/v1"
+  kindsRegexp: "."
+  resourceNameRegexp: "aks.cattle.io$"
+- apiVersion: "aks.cattle.io/v1"
+  kindsRegexp: "."
+- apiVersion: "apps/v1"
+  kindsRegexp: "^deployments$"
+  namespaces:
+    - "cattle-system"
+  resourceNames:
+    - "aks-config-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterroles$"
+  resourceNames:
+    - "aks-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterrolebindings$"
+  resourceNames:
+    - "aks-operator"
+- apiVersion: "v1"
+  kindsRegexp: "^serviceaccounts$"
+  namespaces:
+    - "cattle-system"
+  resourceNames:
+  - "aks-operator"
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/eks.yaml b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/eks.yaml
new file mode 100644
index 000000000..ae57baddf
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/eks.yaml
@@ -0,0 +1,17 @@
+- apiVersion: "eks.cattle.io/v1"
+  kindsRegexp: "."
+- apiVersion: "apps/v1"
+  kindsRegexp: "^deployments$"
+  resourceNames:
+    - "eks-config-operator"
+- apiVersion: "apiextensions.k8s.io/v1"
+  kindsRegexp: "."
+  resourceNameRegexp: "eks.cattle.io$"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterroles$"
+  resourceNames:
+    - "eks-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterrolebindings$"
+  resourceNames:
+    - "eks-operator"
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/elemental.yaml b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/elemental.yaml
new file mode 100644
index 000000000..1d38b1229
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/elemental.yaml
@@ -0,0 +1,49 @@
+- apiVersion: "apiextensions.k8s.io/v1"
+  kindsRegexp: "."
+  resourceNameRegexp: "elemental.cattle.io$"
+- apiVersion: "apps/v1"
+  kindsRegexp: "^deployments$"
+  namespaces:
+    - "cattle-elemental-system"
+  resourceNames:
+    - "elemental-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterroles$"
+  resourceNames:
+    - "elemental-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterrolebindings$"
+  resourceNames:
+    - "elemental-operator"
+- apiVersion: "v1"
+  kindsRegexp: "^serviceaccounts$"
+  namespaces:
+    - "cattle-elemental-system"
+  resourceNames:
+    - "elemental-operator"
+- apiVersion: "management.cattle.io/v3"
+  kindsRegexp: "^globalrole$"
+  resourceNames:
+    - "elemental-operator"
+- apiVersion: "management.cattle.io/v3"
+  kindsRegexp: "^apiservice$"
+  resourceNameRegexp: "elemental.cattle.io$"
+- apiVersion: "elemental.cattle.io/v1beta1"
+  kindsRegexp: "."
+  namespaceRegexp: "^cattle-fleet-|^fleet-"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^roles$|^rolebindings$"
+  labelSelectors:
+    matchExpressions:
+    - key: "elemental.cattle.io/managed"
+      operator: "In"
+      values: ["true"]
+  namespaceRegexp: "^cattle-fleet-|^fleet-"
+- apiVersion: "v1"
+  kindsRegexp: "^secrets$|^serviceaccounts$"
+  labelSelectors:
+    matchExpressions:
+    - key: "elemental.cattle.io/managed"
+      operator: "In"
+      values: ["true"]
+  namespaceRegexp: "^cattle-fleet-|^fleet-"
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/fleet.yaml b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/fleet.yaml
new file mode 100644
index 000000000..a14125fec
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/fleet.yaml
@@ -0,0 +1,53 @@
+- apiVersion: "v1"
+  kindsRegexp: "^namespaces$"
+  resourceNameRegexp: "^fleet-"
+- apiVersion: "v1"
+  kindsRegexp: "^secrets$"
+  namespaceRegexp: "^cattle-fleet-|^fleet-"
+  excludeResourceNameRegexp: "^import-token"
+  labelSelectors:
+    matchExpressions:
+      - key: "owner"
+        operator: "NotIn"
+        values: ["helm"]
+      - key: "fleet.cattle.io/managed"
+        operator: "In"
+        values: ["true"]
+- apiVersion: "v1"
+  kindsRegexp: "^serviceaccounts$"
+  namespaceRegexp: "^cattle-fleet-|^fleet-"
+  excludeResourceNameRegexp: "^default$"
+- apiVersion: "v1"
+  kindsRegexp: "^configmaps$"
+  namespaceRegexp: "^cattle-fleet-|^fleet-"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^roles$|^rolebindings$"
+  namespaceRegexp: "^cattle-fleet-|^fleet-"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterrolebindings$"
+  resourceNameRegexp: "^fleet-|^gitjob-"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterroles$"
+  resourceNameRegexp: "^fleet-"
+  resourceNames:
+    - "gitjob"
+- apiVersion: "apiextensions.k8s.io/v1"
+  kindsRegexp: "."
+  resourceNameRegexp: "fleet.cattle.io$|gitjob.cattle.io$"
+- apiVersion: "fleet.cattle.io/v1alpha1"
+  kindsRegexp: "."
+  excludeKinds:
+    - "bundledeployments"
+- apiVersion: "gitjob.cattle.io/v1"
+  kindsRegexp: "."
+- apiVersion: "apps/v1"
+  kindsRegexp: "^deployments$"
+  namespaceRegexp: "^cattle-fleet-|^fleet-"
+  resourceNameRegexp: "^fleet-"
+  resourceNames:
+    - "gitjob"
+- apiVersion: "apps/v1"
+  kindsRegexp: "^services$"
+  namespaceRegexp: "^cattle-fleet-|^fleet-"
+  resourceNames:
+    - "gitjob"
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/gke.yaml b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/gke.yaml
new file mode 100644
index 000000000..a87eef364
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/gke.yaml
@@ -0,0 +1,17 @@
+- apiVersion: "apiextensions.k8s.io/v1"
+  kindsRegexp: "."
+  resourceNameRegexp: "gke.cattle.io$"
+- apiVersion: "gke.cattle.io/v1"
+  kindsRegexp: "."
+- apiVersion: "apps/v1"
+  kindsRegexp: "^deployments$"
+  resourceNames:
+    - "gke-config-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterroles$"
+  resourceNames:
+    - "gke-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterrolebindings$"
+  resourceNames:
+    - "gke-operator"
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/provisioningv2.yaml b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/provisioningv2.yaml
new file mode 100644
index 000000000..50a7f906b
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/provisioningv2.yaml
@@ -0,0 +1,23 @@
+- apiVersion: "apiextensions.k8s.io/v1"
+  kindsRegexp: "."
+  resourceNameRegexp: "provisioning.cattle.io$|rke-machine-config.cattle.io$|rke-machine.cattle.io$|rke.cattle.io$|cluster.x-k8s.io$"
+- apiVersion: "provisioning.cattle.io/v1"
+  kindsRegexp: "."
+- apiVersion: "rke-machine-config.cattle.io/v1"
+  kindsRegexp: "."
+- apiVersion: "rke-machine.cattle.io/v1"
+  kindsRegexp: "."
+- apiVersion: "rke.cattle.io/v1"
+  kindsRegexp: "."
+- apiVersion: "cluster.x-k8s.io/v1beta1"
+  kindsRegexp: "."
+- apiVersion: "v1"
+  kindsRegexp: "^secrets$"
+  resourceNameRegexp: "machine-plan$|rke-state$|machine-state$|machine-driver-secret$|machine-provision$|^harvesterconfig"
+  namespaces:
+  - "fleet-default"
+- apiVersion: "v1"
+  kindsRegexp: "^configmaps$"
+  resourceNames:
+    - "provisioning-log"
+  namespaceRegexp: "^c-m-"
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/rancher-operator.yaml b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/rancher-operator.yaml
new file mode 100644
index 000000000..f30c2fd96
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/rancher-operator.yaml
@@ -0,0 +1,28 @@
+- apiVersion: "rancher.cattle.io/v1"
+  kindsRegexp: "."
+- apiVersion: "apps/v1"
+  kindsRegexp: "^deployments$"
+  resourceNames:
+    - "rancher-operator"
+  namespaces:
+    - "rancher-operator-system"
+- apiVersion: "v1"
+  kindsRegexp: "^serviceaccounts$"
+  namespaces:
+    - "rancher-operator-system"
+  excludeResourceNameRegexp: "^default$"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterrolebindings$"
+  resourceNames:
+    - "rancher-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterroles$"
+  resourceNames:
+    - "rancher-operator"
+- apiVersion: "apiextensions.k8s.io/v1"
+  kindsRegexp: "."
+  resourceNameRegexp: "rancher.cattle.io$"
+- apiVersion: "v1"
+  kindsRegexp: "^namespaces$"
+  resourceNames:
+    - "rancher-operator-system"
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/rancher.yaml b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/rancher.yaml
new file mode 100644
index 000000000..47fa2e02f
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/files/default-resourceset-contents/rancher.yaml
@@ -0,0 +1,65 @@
+- apiVersion: "v1"
+  kindsRegexp: "^namespaces$"
+  resourceNameRegexp: "^cattle-|^p-|^c-|^user-|^u-"
+  resourceNames:
+    - "local"
+- apiVersion: "v1"
+  kindsRegexp: "^secrets$"
+  namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+  labelSelectors:
+    matchExpressions:
+      - key: "owner"
+        operator: "NotIn"
+        values: ["helm"]
+  excludeResourceNameRegexp: "^bootstrap-secret$|^rancher-csp-adapter|^csp-adapter-cache$"
+- apiVersion: "v1"
+  kindsRegexp: "^serviceaccounts$"
+  namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+  excludeResourceNameRegexp: "^default$|^rancher-csp-adapter$"
+- apiVersion: "v1"
+  kindsRegexp: "^configmaps$"
+  namespaces:
+    - "cattle-system"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^roles$|^rolebindings$"
+  namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+  excludeResourceNameRegexp: "^rancher-csp-adapter"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterrolebindings$"
+  resourceNameRegexp: "^cattle-|^clusterrolebinding-|^globaladmin-user-|^grb-u-|^crb-"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+  kindsRegexp: "^clusterroles$"
+  resourceNameRegexp: "^cattle-|^p-|^c-|^local-|^user-|^u-|^project-|^create-ns$"
+  excludeResourceNameRegexp: "^rancher-csp-adapter-"
+- apiVersion: "scheduling.k8s.io/v1"
+  kindsRegexp: "^priorityclasses$"
+  resourceNameRegexp: "^rancher-critical$"
+- apiVersion: "apiextensions.k8s.io/v1"
+  kindsRegexp: "."
+  resourceNameRegexp: "management.cattle.io$|project.cattle.io$|catalog.cattle.io$|resources.cattle.io$"
+- apiVersion: "management.cattle.io/v3"
+  kindsRegexp: "."
+  excludeKinds:
+    - "tokens"
+    - "rancherusernotifications"
+- apiVersion: "management.cattle.io/v3"
+  kindsRegexp: "^tokens$"
+  labelSelectors:
+    matchExpressions:
+      - key: "authn.management.cattle.io/kind"
+        operator: "NotIn"
+        values: [ "provisioning" ]
+- apiVersion: "project.cattle.io/v3"
+  kindsRegexp: "."
+- apiVersion: "catalog.cattle.io/v1"
+  kindsRegexp: "^clusterrepos$"
+- apiVersion: "resources.cattle.io/v1"
+  kindsRegexp: "^ResourceSet$"
+- apiVersion: "v1"
+  kindsRegexp: "^secrets$"
+  namespaceRegexp: "^.*$"
+  labelSelectors:
+    matchExpressions:
+      - key: "resources.cattle.io/backup"
+        operator: "In"
+        values: ["true"]
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/_helpers.tpl b/charts/rancher-backup/103.0.0+up4.0.0/templates/_helpers.tpl
new file mode 100644
index 000000000..a5e485243
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/_helpers.tpl
@@ -0,0 +1,87 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes, 
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+  value: "linux"
+  effect: "NoSchedule"
+  operator: "Equal"
+{{- end -}}
+
+{{- define "linux-node-selector" -}}
+{{- if semverCompare "<1.14-0" .Capabilities.KubeVersion.GitVersion -}}
+beta.kubernetes.io/os: linux
+{{- else -}}
+kubernetes.io/os: linux
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "backupRestore.fullname" -}}
+{{- .Chart.Name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "backupRestore.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "backupRestore.labels" -}}
+helm.sh/chart: {{ include "backupRestore.chart" . }}
+{{ include "backupRestore.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "backupRestore.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "backupRestore.fullname" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+resources.cattle.io/operator: backup-restore
+{{- end }}
+
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "backupRestore.serviceAccountName" -}}
+{{ include "backupRestore.fullname" . }}
+{{- end }}
+
+
+{{- define "backupRestore.s3SecretName" -}}
+{{- printf "%s-%s" .Chart.Name "s3" | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create PVC name using release and revision number, unless a volumeName is given.
+*/}}
+{{- define "backupRestore.pvcName" -}}
+{{- if and .Values.persistence.volumeName }}
+{{- printf "%s" .Values.persistence.volumeName }}
+{{- else -}}
+{{- printf "%s-%d" .Release.Name .Release.Revision }}
+{{- end }}
+{{- end }}
+
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/clusterrolebinding.yaml b/charts/rancher-backup/103.0.0+up4.0.0/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..cf4abf670
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/clusterrolebinding.yaml
@@ -0,0 +1,14 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ include "backupRestore.fullname" . }}
+  labels:
+    {{- include "backupRestore.labels" . | nindent 4 }}
+subjects:
+- kind: ServiceAccount
+  name: {{ include "backupRestore.serviceAccountName" . }}
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: cluster-admin
+  apiGroup: rbac.authorization.k8s.io
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/deployment.yaml b/charts/rancher-backup/103.0.0+up4.0.0/templates/deployment.yaml
new file mode 100644
index 000000000..631fa458b
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/deployment.yaml
@@ -0,0 +1,79 @@
+{{- if and .Values.s3.enabled .Values.persistence.enabled }}
+{{- fail "\n\nCannot configure both s3 and PV for storing backups" }}
+{{- end }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "backupRestore.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+  selector:
+    matchLabels:
+      {{- include "backupRestore.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        {{- include "backupRestore.selectorLabels" . | nindent 8 }}
+      annotations:
+        checksum/s3: {{ include (print $.Template.BasePath "/s3-secret.yaml") . | sha256sum }}
+        checksum/pvc: {{ include (print $.Template.BasePath "/pvc.yaml") . | sha256sum }}
+    spec:
+      serviceAccountName: {{ include "backupRestore.serviceAccountName" . }}
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+      {{ toYaml .Values.imagePullSecrets | indent 6 }}
+      {{- end }}
+      {{- if .Values.priorityClassName }}
+      priorityClassName: {{ .Values.priorityClassName }}
+      {{- end }}
+      containers:
+      - name: {{ .Chart.Name }}
+        image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+        imagePullPolicy: {{ default "Always" .Values.imagePullPolicy }}
+        args:
+{{- if .Values.debug }}
+        - "--debug"
+{{- end }}
+{{- if .Values.trace }}
+        - "--trace"
+{{- end }}
+        env:
+        - name: CHART_NAMESPACE
+          value: {{ .Release.Namespace }}
+          {{- if .Values.s3.enabled }}
+        - name: DEFAULT_S3_BACKUP_STORAGE_LOCATION
+          value: {{ include "backupRestore.s3SecretName" . }}
+          {{- end }}
+          {{- if .Values.proxy }}
+        - name: HTTP_PROXY
+          value: {{ .Values.proxy }}
+        - name: HTTPS_PROXY
+          value: {{ .Values.proxy }}
+        - name: NO_PROXY
+          value: {{ .Values.noProxy }}
+          {{- end }}
+          {{- if .Values.persistence.enabled }}
+        - name: DEFAULT_PERSISTENCE_ENABLED
+          value: "persistence-enabled"
+        volumeMounts:
+        - mountPath: "/var/lib/backups"
+          name: pv-storage
+      volumes:
+        - name: pv-storage
+          persistentVolumeClaim:
+            claimName: {{ include "backupRestore.pvcName" . }}
+          {{- end }} 
+      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+{{- if .Values.nodeSelector }}
+{{ toYaml .Values.nodeSelector | indent 8 }}
+{{- end }}
+      {{- with .Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      tolerations: {{ include "linux-node-tolerations" . | nindent 8 }}
+{{- if .Values.tolerations }}
+{{ toYaml .Values.tolerations | indent 8 }}
+{{- end }}
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/hardened.yaml b/charts/rancher-backup/103.0.0+up4.0.0/templates/hardened.yaml
new file mode 100644
index 000000000..bf8492ce0
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/hardened.yaml
@@ -0,0 +1,124 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: {{ include "backupRestore.fullname" . }}-patch-sa
+  namespace: {{ .Release.Namespace }}
+  labels: {{ include "backupRestore.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": post-install, post-upgrade
+    "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+  backoffLimit: 1
+  template:
+    spec:
+      serviceAccountName: {{ include "backupRestore.fullname" . }}-patch-sa
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+      restartPolicy: Never
+      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+{{- if .Values.nodeSelector }}
+{{ toYaml .Values.nodeSelector | indent 8 }}
+{{- end }}
+      tolerations: {{ include "linux-node-tolerations" . | nindent 8 }}
+{{- if .Values.tolerations }}
+{{ toYaml .Values.tolerations | indent 8 }}
+{{- end }}
+      containers:
+        - name: {{ include "backupRestore.fullname" . }}-patch-sa
+          image: {{ include "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}
+          imagePullPolicy: IfNotPresent
+          command: ["kubectl", "-n", {{ .Release.Namespace | quote }}, "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "backupRestore.fullname" . }}-patch-sa
+  namespace: {{ .Release.Namespace }}
+  labels: {{ include "backupRestore.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": post-install, post-upgrade
+    "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ include "backupRestore.fullname" . }}-patch-sa
+  labels: {{ include "backupRestore.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": post-install, post-upgrade
+    "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+rules:
+  - apiGroups: [""]
+    resources: ["serviceaccounts"]
+    verbs: ["get", "patch"]
+{{- if .Values.global.cattle.psp.enabled}}
+  - apiGroups: ["policy"]
+    resources: ["podsecuritypolicies"]
+    verbs:     ["use"]
+    resourceNames:
+      - {{ include "backupRestore.fullname" . }}-patch-sa
+{{- end}}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "backupRestore.fullname" . }}-patch-sa
+  labels: {{ include "backupRestore.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": post-install, post-upgrade
+    "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ include "backupRestore.fullname" . }}-patch-sa
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "backupRestore.fullname" . }}-patch-sa
+    namespace: {{ .Release.Namespace }}
+---
+{{- if .Values.global.cattle.psp.enabled}}
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+  name: {{ include "backupRestore.fullname" . }}-patch-sa
+  labels: {{ include "backupRestore.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": post-install, post-upgrade
+    "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+  privileged: false
+  hostNetwork: false
+  hostIPC: false
+  hostPID: false
+  runAsUser:
+    rule: 'MustRunAsNonRoot'
+  seLinux:
+    rule: 'RunAsAny'
+  supplementalGroups:
+    rule: 'MustRunAs'
+    ranges:
+      - min: 1
+        max: 65535
+  fsGroup:
+    rule: 'MustRunAs'
+    ranges:
+      - min: 1
+        max: 65535
+  readOnlyRootFilesystem: false
+  volumes:
+    - 'secret'
+{{- end}}
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ include "backupRestore.fullname" . }}-default-allow-all
+  namespace: {{ .Release.Namespace }}
+spec:
+  podSelector: {}
+  egress:
+    - {}
+  policyTypes:
+    - Ingress
+    - Egress
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/psp.yaml b/charts/rancher-backup/103.0.0+up4.0.0/templates/psp.yaml
new file mode 100644
index 000000000..34bc96ee7
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/psp.yaml
@@ -0,0 +1,31 @@
+{{- if .Values.global.cattle.psp.enabled -}}
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+  name: {{ include "backupRestore.fullname" . }}-psp
+  labels: {{ include "backupRestore.labels" . | nindent 4 }}
+spec:
+  privileged: false
+  allowPrivilegeEscalation: false
+  hostNetwork: false
+  hostIPC: false
+  hostPID: false
+  runAsUser:
+    rule: 'MustRunAsNonRoot'
+  seLinux:
+    rule: 'RunAsAny'
+  supplementalGroups:
+    rule: 'MustRunAs'
+    ranges:
+      - min: 1
+        max: 65535
+  fsGroup:
+    rule: 'MustRunAs'
+    ranges:
+      - min: 1
+        max: 65535
+  readOnlyRootFilesystem: false
+  volumes:
+    - 'persistentVolumeClaim'
+    - 'secret'
+{{- end -}}
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/pvc.yaml b/charts/rancher-backup/103.0.0+up4.0.0/templates/pvc.yaml
new file mode 100644
index 000000000..ff57e4dab
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/pvc.yaml
@@ -0,0 +1,27 @@
+{{- if and .Values.persistence.enabled -}}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ include "backupRestore.pvcName" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+     {{- with .Values.persistence }}
+    requests:
+      storage: {{ .size | quote }}
+{{- if .storageClass }}
+{{- if (eq "-" .storageClass) }}
+  storageClassName: ""
+{{- else }}
+  storageClassName: {{ .storageClass | quote }}
+{{- end }}
+{{- end }}
+{{- if .volumeName }}
+  volumeName: {{ .volumeName | quote }}
+{{- end }}
+{{- end }}
+{{- end }}
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/rancher-resourceset.yaml b/charts/rancher-backup/103.0.0+up4.0.0/templates/rancher-resourceset.yaml
new file mode 100644
index 000000000..05add8824
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/rancher-resourceset.yaml
@@ -0,0 +1,13 @@
+apiVersion: resources.cattle.io/v1
+kind: ResourceSet
+metadata:
+  name: rancher-resource-set
+controllerReferences:
+  - apiVersion: "apps/v1"
+    resource: "deployments"
+    name: "rancher"
+    namespace: "cattle-system"
+resourceSelectors:
+{{- range $path, $_ := .Files.Glob "files/default-resourceset-contents/*.yaml" -}}
+  {{- $.Files.Get $path | nindent 2 -}}
+{{- end -}}
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/s3-secret.yaml b/charts/rancher-backup/103.0.0+up4.0.0/templates/s3-secret.yaml
new file mode 100644
index 000000000..726509730
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/s3-secret.yaml
@@ -0,0 +1,31 @@
+{{- if .Values.s3.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "backupRestore.s3SecretName" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "backupRestore.labels" . | nindent 4 }}
+type: Opaque
+stringData:
+  {{- with .Values.s3 }}
+  {{- if .credentialSecretName }}
+  credentialSecretName: {{ .credentialSecretName }} 
+  credentialSecretNamespace: {{ required "When providing a Secret containing S3 credentials, a valid .Values.credentialSecretNamespace must be provided" .credentialSecretNamespace }}
+  {{- end }}
+  {{- if .region }}
+  region: {{ .region | quote }}
+  {{- end }}
+  bucketName: {{ required "A valid .Values.bucketName is required for configuring S3 compatible storage as the default backup storage location" .bucketName | quote }}
+  {{- if .folder }}
+  folder: {{ .folder | quote }}
+  {{- end }}
+  endpoint: {{ required "A valid .Values.endpoint is required for configuring S3 compatible storage as the default backup storage location" .endpoint | quote }}
+  {{- if .endpointCA }} 
+  endpointCA: {{ .endpointCA }} 
+  {{- end }}
+  {{- if .insecureTLSSkipVerify }}
+  insecureTLSSkipVerify: {{ .insecureTLSSkipVerify | quote }}
+  {{- end }}
+  {{- end }}
+{{ end }}
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/serviceaccount.yaml b/charts/rancher-backup/103.0.0+up4.0.0/templates/serviceaccount.yaml
new file mode 100644
index 000000000..754e1fe89
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/serviceaccount.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "backupRestore.serviceAccountName" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+     {{- include "backupRestore.labels" . | nindent 4 }}
+{{- if .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml .Values.serviceAccount.annotations | nindent 4 }}
+{{- end }}
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/validate-install-crd.yaml b/charts/rancher-backup/103.0.0+up4.0.0/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..f63fd2e2e
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/validate-install-crd.yaml
@@ -0,0 +1,16 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "resources.cattle.io/v1/Backup" false -}}
+# {{- set $found "resources.cattle.io/v1/ResourceSet" false -}}
+# {{- set $found "resources.cattle.io/v1/Restore" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# 	{{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# 	{{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
\ No newline at end of file
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/templates/validate-psp-install.yaml b/charts/rancher-backup/103.0.0+up4.0.0/templates/validate-psp-install.yaml
new file mode 100644
index 000000000..a30c59d3b
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/templates/validate-psp-install.yaml
@@ -0,0 +1,7 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+#{{- if .Values.global.cattle.psp.enabled }}
+#{{- if not (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
+#{{- fail "The target cluster does not have the PodSecurityPolicy API resource. Please disable PSPs in this chart before proceeding." -}}
+#{{- end }}
+#{{- end }}
+#{{- end }}
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/tests/deployment_test.yaml b/charts/rancher-backup/103.0.0+up4.0.0/tests/deployment_test.yaml
new file mode 100644
index 000000000..671d415db
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/tests/deployment_test.yaml
@@ -0,0 +1,216 @@
+suite: Test Deployment
+templates:
+- deployment.yaml
+- s3-secret.yaml
+- pvc.yaml
+- _helpers.tpl
+tests:
+- it: should set name
+  template: deployment.yaml
+  asserts:
+  - equal:
+      path: metadata.name
+      value: "rancher-backup"
+- it: should set namespace
+  template: deployment.yaml
+  asserts:
+  - equal:
+      path: metadata.namespace
+      value: "NAMESPACE"
+- it: should set priorityClassName
+  set:
+    priorityClassName: "testClass"
+  template: deployment.yaml
+  asserts:
+  - equal:
+      path: spec.template.spec.priorityClassName
+      value: "testClass"
+- it: should set default imagePullPolicy
+  template: deployment.yaml
+  asserts:
+  - equal:
+      path: spec.template.spec.containers[0].imagePullPolicy
+      value: "Always"
+- it: should set imagePullPolicy
+  set:
+    imagePullPolicy: "IfNotPresent"
+  template: deployment.yaml
+  asserts:
+  - equal:
+      path: spec.template.spec.containers[0].imagePullPolicy
+      value: "IfNotPresent"
+- it: should set debug loglevel
+  set:
+    debug: true
+  template: deployment.yaml
+  asserts:
+  - contains:
+      path: spec.template.spec.containers[0].args
+      content: "--debug"
+- it: should set trace loglevel
+  set:
+    trace: true
+  template: deployment.yaml
+  asserts:
+  - contains:
+      path: spec.template.spec.containers[0].args
+      content: "--trace"
+- it: should set proxy environment variables
+  set:
+    proxy: "https://127.0.0.1:3128"
+  template: deployment.yaml
+  asserts:
+  - contains:
+      path: spec.template.spec.containers[0].env
+      content:
+        name: HTTP_PROXY
+        value: "https://127.0.0.1:3128"
+  - contains:
+      path: spec.template.spec.containers[0].env
+      content:
+        name: HTTPS_PROXY
+        value: "https://127.0.0.1:3128"
+  - contains:
+      path: spec.template.spec.containers[0].env
+      content:
+        name: NO_PROXY
+        value: "127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local"
+- it: should set proxy environment variables with modified noproxy
+  set:
+    proxy: "https://127.0.0.1:3128"
+    noProxy: "192.168.0.0/24"
+  template: deployment.yaml
+  asserts:
+  - contains:
+      path: spec.template.spec.containers[0].env
+      content:
+        name: NO_PROXY
+        value: "192.168.0.0/24"
+- it: should set persistence variables
+  set:
+    persistence.enabled: true
+  template: deployment.yaml
+  asserts:
+  - contains:
+      path: spec.template.spec.containers[0].env
+      content:
+        name: DEFAULT_PERSISTENCE_ENABLED
+        value: "persistence-enabled"
+  - contains:
+      path: spec.template.spec.containers[0].volumeMounts
+      content:
+        mountPath: "/var/lib/backups"
+        name: "pv-storage"
+  - equal:
+      path: spec.template.spec.volumes[0].name
+      value: "pv-storage"
+  - equal:
+      path: spec.template.spec.volumes[0].persistentVolumeClaim
+      value:
+        claimName: RELEASE-NAME-0
+- it: should set claim from custom static volumeName
+  set:
+    persistence.enabled: true
+    persistence.volumeName: "PREDEFINED-VOLUME"
+    persistence.storageClass: "PREDEFINED-STORAGECLASS"
+    persistence.size: "PREDIFINED-SAMEAS-PVSIZE"
+  template: deployment.yaml
+  asserts:
+  - contains:
+      path: spec.template.spec.containers[0].env
+      content:
+        name: DEFAULT_PERSISTENCE_ENABLED
+        value: "persistence-enabled"
+  - equal:
+      path: spec.template.spec.volumes[0].persistentVolumeClaim
+      value:
+        claimName: PREDEFINED-VOLUME
+- it: should set private registry
+  template: deployment.yaml
+  set:
+    global.cattle.systemDefaultRegistry: "my.registry.local:3000"
+  asserts:
+  - matchRegex:
+      path: spec.template.spec.containers[0].image
+      pattern: ^my.registry.local:3000/rancher/backup-restore-operator:.*$
+- it: should set nodeselector
+  template: deployment.yaml
+  asserts:
+  - equal:
+      path: spec.template.spec.nodeSelector
+      value:
+        kubernetes.io/os: linux
+- it: should not set default affinity
+  template: deployment.yaml
+  asserts:
+  - isNull:
+      path: spec.template.spec.affinity
+- it: should set custom affinity
+  template: deployment.yaml
+  set:
+    affinity:
+      nodeAffinity:
+        requiredDuringSchedulingIgnoredDuringExecution:
+          nodeSelectorTerms:
+          - matchExpressions:
+            - key: disktype
+              operator: In
+              values:
+              - ssd  
+  asserts:
+  - equal:
+      path: spec.template.spec.affinity
+      value:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - key: disktype
+                operator: In
+                values:
+                - ssd  
+- it: should set tolerations
+  template: deployment.yaml
+  asserts:
+  - equal:
+      path: spec.template.spec.tolerations[0]
+      value:
+        key: "cattle.io/os"
+        value: "linux"
+        effect: "NoSchedule"
+        operator: "Equal"
+- it: should set custom tolerations
+  template: deployment.yaml
+  set:
+    tolerations:
+    - key: "example-key"
+      operator: "Exists"
+      effect: "NoSchedule"
+  asserts:
+  - equal:
+      path: spec.template.spec.tolerations[0]
+      value:
+        key: "cattle.io/os"
+        value: "linux"
+        effect: "NoSchedule"
+        operator: "Equal"
+  - equal:
+      path: spec.template.spec.tolerations[1]
+      value:
+        key: "example-key"
+        operator: "Exists"
+        effect: "NoSchedule"
+- it: should not set default imagePullSecrets
+  template: deployment.yaml
+  asserts:
+  - isNull:
+      path: spec.template.spec.imagePullSecrets
+- it: should set imagePullSecrets
+  set:
+    imagePullSecrets:
+    - name: "pull-secret"
+  template: deployment.yaml
+  asserts:
+  - equal:
+      path: spec.template.spec.imagePullSecrets[0].name
+      value: "pull-secret"
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/tests/pvc_test.yaml b/charts/rancher-backup/103.0.0+up4.0.0/tests/pvc_test.yaml
new file mode 100644
index 000000000..3a1c40698
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/tests/pvc_test.yaml
@@ -0,0 +1,102 @@
+suite: Test PVC
+templates:
+- pvc.yaml
+- _helpers.tpl
+tests:
+- it: should set name
+  template: pvc.yaml
+  set:
+    persistence:
+      enabled: true
+  asserts:
+  - equal:
+      path: metadata.name
+      value: "RELEASE-NAME-0"
+- it: should set namespace
+  template: pvc.yaml
+  set:
+    persistence:
+      enabled: true
+  asserts:
+  - equal:
+      path: metadata.namespace
+      value: "NAMESPACE"
+- it: should set accessModes
+  template: pvc.yaml
+  set:
+    persistence:
+      enabled: true
+  asserts:
+  - equal:
+      path: spec.accessModes[0]
+      value: "ReadWriteOnce"
+- it: should set size
+  template: pvc.yaml
+  set:
+    persistence:
+      enabled: true
+  asserts:
+  - equal:
+      path: spec.resources.requests.storage
+      value: "2Gi"
+- it: should set size
+  template: pvc.yaml
+  set:
+    persistence:
+      enabled: true
+      size: "10Gi"
+  asserts:
+  - equal:
+      path: spec.resources.requests.storage
+      value: "10Gi"
+- it: should not set volumeName
+  template: pvc.yaml
+  set:
+    persistence:
+      enabled: true
+  asserts:
+  - isNull:
+      path: spec.volumeName
+- it: should set default storageClass
+  template: pvc.yaml
+  set:
+    persistence:
+      enabled: true
+  asserts:
+  - equal:
+      path: spec.storageClassName
+      value: ""
+- it: should set custom storageClass
+  template: pvc.yaml
+  set:
+    persistence:
+      enabled: true
+      storageClass: "storage-class"
+  asserts:
+  - equal:
+      path: spec.storageClassName
+      value: "storage-class"
+- it: should set custom volumeName
+  template: pvc.yaml
+  set:
+    persistence:
+      enabled: true
+      volumeName: "volume-name"
+  asserts:
+  - equal:
+      path: spec.volumeName
+      value: "volume-name"
+- it: should set claim from custom static volumeName
+  set:
+    persistence.enabled: true
+    persistence.volumeName: "PREDEFINED-VOLUME"
+    persistence.storageClass: "PREDEFINED-STORAGECLASS"
+    persistence.size: "PREDEFINED-SAMEAS-PVSIZE"
+  template: pvc.yaml
+  asserts:
+  - equal:
+      path: spec.resources.requests.storage
+      value: "PREDEFINED-SAMEAS-PVSIZE"
+  - equal:
+      path: spec.storageClassName
+      value: "PREDEFINED-STORAGECLASS"
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/tests/s3-secret_test.yaml b/charts/rancher-backup/103.0.0+up4.0.0/tests/s3-secret_test.yaml
new file mode 100644
index 000000000..af130dd29
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/tests/s3-secret_test.yaml
@@ -0,0 +1,141 @@
+suite: Test S3 Secret
+templates:
+- s3-secret.yaml
+- _helpers.tpl
+tests:
+- it: should set name
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+  asserts:
+  - equal:
+      path: metadata.name
+      value: "rancher-backup-s3"
+- it: should set namespace
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+  asserts:
+  - equal:
+      path: metadata.namespace
+      value: "NAMESPACE"
+- it: should not set credentialSecretName
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+  asserts:
+  - isNull:
+      path: stringData.credentialSecretName
+- it: should set credentialSecretName
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+      credentialSecretName: "credential-secret-name"
+      credentialSecretNamespace: "credential-secret-namespace"
+  asserts:
+  - equal:
+      path: stringData.credentialSecretName
+      value: "credential-secret-name"
+  - equal:
+      path: stringData.credentialSecretNamespace
+      value: "credential-secret-namespace"
+- it: should not set folder
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+  asserts:
+  - isNull:
+      path: stringData.folder
+- it: should set folder
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+      folder: "myfolder"
+  asserts:
+  - equal:
+      path: stringData.folder
+      value: "myfolder"
+- it: should not set region
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+  asserts:
+  - isNull:
+      path: stringData.region
+- it: should set region
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+      region: "us-west-1"
+  asserts:
+  - equal:
+      path: stringData.region
+      value: "us-west-1"
+- it: should not set endpointCA
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+  asserts:
+  - isNull:
+      path: stringData.endpointCA
+- it: should set endpointCA
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+      endpointCA: "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"
+  asserts:
+  - equal:
+      path: stringData.endpointCA
+      value: "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"
+- it: should not set insecureTLSSkipVerify
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+  asserts:
+  - isNull:
+      path: stringData.insecureTLSSkipVerify
+- it: should set insecureTLSSkipVerify
+  template: s3-secret.yaml
+  set:
+    s3:
+      enabled: true
+      bucketName: "yourbucket"
+      endpoint: "https://s3.amazonaws.com"
+      insecureTLSSkipVerify: "true"
+  asserts:
+  - equal:
+      path: stringData.insecureTLSSkipVerify
+      value: "true"
diff --git a/charts/rancher-backup/103.0.0+up4.0.0/values.yaml b/charts/rancher-backup/103.0.0+up4.0.0/values.yaml
new file mode 100644
index 000000000..5d606f742
--- /dev/null
+++ b/charts/rancher-backup/103.0.0+up4.0.0/values.yaml
@@ -0,0 +1,81 @@
+image:
+  repository: rancher/backup-restore-operator
+  tag: v4.0.0
+
+## Default s3 bucket for storing all backup files created by the backup-restore-operator
+s3:
+  enabled: false
+  ## credentialSecretName if set, should be the name of the Secret containing AWS credentials.
+  ## To use IAM Role, don't set this field
+  credentialSecretName: ""
+  credentialSecretNamespace: ""
+  region: ""
+  bucketName: ""
+  folder: ""
+  endpoint: ""
+  endpointCA: ""
+  insecureTLSSkipVerify: false
+
+## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
+## If persistence is enabled, operator will create a PVC with mountPath /var/lib/backups
+persistence:
+  enabled: false
+
+  ## If defined, storageClassName: <storageClass>
+  ## If set to "-", storageClassName: "", which disables dynamic provisioning
+  ## If undefined (the default) or set to null, no storageClassName spec is
+  ##   set, choosing the default provisioner.  (gp2 on AWS, standard on
+  ##   GKE, AWS & OpenStack).
+  ## Refer https://kubernetes.io/docs/concepts/storage/persistent-volumes/#class-1
+  ##
+  storageClass: "-"
+
+  ## If you want to disable dynamic provisioning by setting storageClass to "-" above,
+  ## and want to target a particular PV, provide name of the target volume
+  volumeName: ""
+
+  ## Only certain StorageClasses allow resizing PVs; Refer https://kubernetes.io/blog/2018/07/12/resizing-persistent-volumes-using-kubernetes/
+  size: 2Gi
+
+# Add log level flags to backup-restore
+debug: false
+trace: false
+
+# http[s] proxy server passed to backup client
+# proxy: http://<username>@<password>:<url>:<port>
+
+# comma separated list of domains or ip addresses that will not use the proxy
+noProxy: 127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
+
+global:
+  cattle:
+    systemDefaultRegistry: ""
+    psp:
+      enabled: false # PSP enablement should default to false
+  kubectl:
+    repository: rancher/kubectl
+    tag: v1.21.9
+
+## Node labels for pod assignment
+## Ref: https://kubernetes.io/docs/user-guide/node-selection/
+##
+nodeSelector: {}
+
+## List of node taints to tolerate (requires Kubernetes >= 1.6)
+tolerations: []
+
+affinity: {}
+
+serviceAccount:
+  annotations: {}
+
+priorityClassName: ""
+
+# Override imagePullPolicy for image
+# options: Always, Never, IfNotPresent
+# Defaults to Always
+imagePullPolicy: "Always"
+
+## Optional array of imagePullSecrets containing private registry credentials
+## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
+imagePullSecrets: []
diff --git a/index.yaml b/index.yaml
index 23c3b9de7..132df6e75 100755
--- a/index.yaml
+++ b/index.yaml
@@ -6527,6 +6527,36 @@ entries:
     - assets/rancher-alerting-drivers/rancher-alerting-drivers-1.0.100.tgz
     version: 1.0.100
   rancher-backup:
+  - annotations:
+      catalog.cattle.io/auto-install: rancher-backup-crd=match
+      catalog.cattle.io/certified: rancher
+      catalog.cattle.io/display-name: Rancher Backups
+      catalog.cattle.io/kube-version: '>= 1.23.0-0 < 1.28.0-0'
+      catalog.cattle.io/namespace: cattle-resources-system
+      catalog.cattle.io/os: linux
+      catalog.cattle.io/permits-os: linux,windows
+      catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
+      catalog.cattle.io/rancher-version: '>= 2.8.0-0 < 2.9.0-0'
+      catalog.cattle.io/release-name: rancher-backup
+      catalog.cattle.io/scope: management
+      catalog.cattle.io/type: cluster-tool
+      catalog.cattle.io/ui-component: rancher-backup
+      catalog.cattle.io/upstream-version: 2.1.1
+    apiVersion: v2
+    appVersion: 4.0.0
+    created: "2023-10-30T12:40:59.106857-07:00"
+    description: Provides ability to back up and restore the Rancher application running
+      on any Kubernetes cluster
+    digest: 5b211ec8cb04c65d642eec33ce5d6e2e9df8d3c0a8f25372f33ea7983a47ead3
+    icon: https://charts.rancher.io/assets/logos/backup-restore.svg
+    keywords:
+    - applications
+    - infrastructure
+    kubeVersion: '>= 1.23.0-0'
+    name: rancher-backup
+    urls:
+    - assets/rancher-backup/rancher-backup-103.0.0+up4.0.0.tgz
+    version: 103.0.0+up4.0.0
   - annotations:
       catalog.cattle.io/auto-install: rancher-backup-crd=match
       catalog.cattle.io/certified: rancher
@@ -7055,6 +7085,21 @@ entries:
     - assets/rancher-backup/rancher-backup-1.0.200.tgz
     version: 1.0.200
   rancher-backup-crd:
+  - annotations:
+      catalog.cattle.io/certified: rancher
+      catalog.cattle.io/hidden: "true"
+      catalog.cattle.io/namespace: cattle-resources-system
+      catalog.cattle.io/release-name: rancher-backup-crd
+    apiVersion: v2
+    appVersion: 4.0.0
+    created: "2023-10-30T12:41:00.790812-07:00"
+    description: Installs the CRDs for rancher-backup.
+    digest: d3363fb031d2756acbaf716133c8bdddb2177e906347f17fe4cf6e5ef662dd4b
+    name: rancher-backup-crd
+    type: application
+    urls:
+    - assets/rancher-backup-crd/rancher-backup-crd-103.0.0+up4.0.0.tgz
+    version: 103.0.0+up4.0.0
   - annotations:
       catalog.cattle.io/certified: rancher
       catalog.cattle.io/hidden: "true"