From eb52604e3e6d37d2cbdd580f493e249cf888b627 Mon Sep 17 00:00:00 2001
From: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
Date: Thu, 9 Mar 2023 12:09:54 -0700
Subject: [PATCH 1/3] bump rancher-webhook to 0.3.2-rc21

---
 packages/rancher-webhook/package.yaml | 2 +-
 release.yaml                          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/rancher-webhook/package.yaml b/packages/rancher-webhook/package.yaml
index 50c5f0ed5..20a62c999 100644
--- a/packages/rancher-webhook/package.yaml
+++ b/packages/rancher-webhook/package.yaml
@@ -1,2 +1,2 @@
-url: https://github.com/rancher/webhook/releases/download/v0.3.2-rc19/rancher-webhook-0.3.2-rc19.tgz
+url: https://github.com/rancher/webhook/releases/download/v0.3.2-rc21/rancher-webhook-0.3.2-rc21.tgz
 version: 2.0.2
diff --git a/release.yaml b/release.yaml
index 81509b14b..8ff5ce193 100644
--- a/release.yaml
+++ b/release.yaml
@@ -76,7 +76,7 @@ rancher-vsphere-csi:
 - 102.0.0+up2.6.2-rancher1
 rancher-webhook:
 - 0.1.600+up0.1.6
-- 2.0.2+up0.3.2-rc19
+- 2.0.2+up0.3.2-rc21
 sriov:
 - 102.0.0+up0.1.0
 sriov-crd:

From 9cc0fe3b32cdaf5dda05129dfc256d34aa7d8a2a Mon Sep 17 00:00:00 2001
From: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
Date: Thu, 9 Mar 2023 12:10:11 -0700
Subject: [PATCH 2/3] make remove

---
 .../rancher-webhook-2.0.2+up0.3.2-rc19.tgz    | Bin 1801 -> 0 bytes
 .../2.0.2+up0.3.2-rc19/Chart.yaml             |  18 ------
 .../2.0.2+up0.3.2-rc19/charts/capi/Chart.yaml |   4 --
 .../charts/capi/templates/service.yaml        |  13 ----
 .../2.0.2+up0.3.2-rc19/templates/_helpers.tpl |  22 -------
 .../templates/deployment.yaml                 |  59 ------------------
 .../2.0.2+up0.3.2-rc19/templates/rbac.yaml    |  12 ----
 .../2.0.2+up0.3.2-rc19/templates/service.yaml |  13 ----
 .../templates/serviceaccount.yaml             |   4 --
 .../2.0.2+up0.3.2-rc19/templates/webhook.yaml |   9 ---
 .../2.0.2+up0.3.2-rc19/values.yaml            |  22 -------
 index.yaml                                    |  22 -------
 12 files changed, 198 deletions(-)
 delete mode 100644 assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc19.tgz
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/Chart.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/Chart.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/templates/service.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/_helpers.tpl
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/deployment.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/rbac.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/service.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/serviceaccount.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/webhook.yaml
 delete mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/values.yaml

diff --git a/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc19.tgz b/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc19.tgz
deleted file mode 100644
index f52491f4dc2ad980986ca2b09ce7e9c26b102c0f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1801
zcmV+k2ln_MiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PI>{Z{xTT&$B+oz>8uZTFH{_wR1vSAeT#v11^D)9JVNmV!=>j
zn+-*(B;{@D^LH=w*OV;VyO+SZMKv#RsNrxV^7rG+kctSpLgjwO$CZ>%!|N4M#(O3)
zzj!tAeczu>Ci!3A_uGGiU=&;glksd8e3(sU(+fYCjHa^-@L$h`!;)%4)P?`zvDz>9
zjR+A!8e*6fI&=UiF@(#dM~N{UJtl_~m0=5pQ3&N)=~P>>C_)j!z^D`lohnc1Bf4u;
znn@AD`#=8)0xy_)zU#vuA@D}|&-a~O1&L87gklIqqpP2_!MIad>JT^+>3=$(Ca7X&
zv|DTa;WHDF{H!~*D|j^A9(l9U>ydYP*lC3viAFbbzW#U>&>WJmkCoB&$RSBm|Lc2W
zZ{#W(eCI@%pomaVhB|aypi)H4<XV&@%tJvQIYtgZF-q3x04PkPW=5*#5C#J$LQNG*
zihdsnXAv<>EU%)N>1@cq6+Xd2D!4EF1oNDrcDjA9zsAV(z0vQ}#Pay97j!RQC2js+
z6P}`e-3{Ob|NAq4(&qmU<8jab=MWZ?C5A1^C>O=Bje7t?mLaSyxC7)C<|*fM$r*hP
z;m5_DG;@U-g>jrEmyd*(dyC=uSO5im|9}gUa&wPMrcKFJ04u4@9h%QlJ%z9!T%+S;
zyq5JW`L1q{Y20Yeb|1%i2S##K#kQ8Snpq)~Zvhb|Tt3Grj0X>huremm;V|Eylt6<z
zWA8{(J)}}lOpG3Cy22>sOe|eoGnyG58p4EeiHO|YXv2K8SSkc27Sgf&2;m?9bcBrX
z0Xb45RS27{<GgzZbH$`$=J}cvt?x*TK(uB{fe{#KyXz!v&HR(SWd7UuHy9_J7}Ud0
zE940(?V03-RB#giA4V<wPp7jU|7VfS#)SwMOdt#jP=1OERDMz=EC=9jw@#+W7T|p>
zHi!b&RkYIy=ek>>m@o?%{7w%Czsdk|jrBi+oj)j|z2A=gMy=KDaq@^<7Y0a@>_;}0
zrM96wQgk!)T3{~?x$uM;ci9nW#$)+b8kT*t23#zVnh*we@}c09JW`fPW-sG|!Og!@
z!Uu=n$8tlLEK>N;<gQ%=Y+34_|HJsVc;|)DzzO`1#~<4J|7;RWd;Fh6>@<WVi5{*4
z=ZT3ZgdghpcVaXoB8G%@p3%mQPLO6#t5sR-@-Z=V^;3?yq5+^2bpX|}EBjgFWx^XK
z4jKWd+{mOwSa!OU!MjjeOP<D9n|90BGhEk$X`~9xZt$w*uIod%yPg)6bUIWLpcU=x
zR2v~s9@8AK*@`DNzy#%KbciZE_yq*Z5=sM?2R*ZmLQbz><ljlmyET4+Zi@{^8-dUP
zKO4+yyE;ASsvYNbdTJ}wj!us_N~OpGJ5<)9K(XG<f3-#)e!jY$TdSg?`^}~rTN@H5
z+wEYl>&@NO_dnfyy1ttKc+`NsW{=ppy}mtaCZ_Q*D|c77HxKix>zlTbzbF~o>mFdi
zkVp5pXttK^b7EFuja{#<+0?p4t^x0}St{{<B<S#9yWMQ+iOf5DyDSB^+i>r(Axqe9
z-`68{lU2hXJ98QA8EmP5{rwWDjNV@tc{*WzpL#*fr7|IWH<^t0`eYOBp6GZvo6YK{
zUqo&dz1_-Gba`sC96+3D6>~T=aWZ_m)HSPVRBKej>`#^gQB+1Zd}%-^SEG1EX=bvM
zC%e(Sm)`7bc4a=h6~6a$H&2##Z@t(47UgjKrydD?ojTB|{BJVe%m0FLU;jUg*zsRJ
z<0LgJsn~z>J=1%-%oB<_D7@yWHmL3;$M2blm{@*6aHu55a?>CQ`>T>^a%3<EU~jBl
zeY<FLNfa~T==AYlNKIZDFZw(*sOO+ZMSFRou-SO`MXBDqt6KkW*y1q$OBR0x3OI%T
z@o2nP|LM>F&La)jG!LbMFMxIfNX?_UDi^E6Bsc#VLKOfRqLye{QBk6#kyP>!e!ecE
z>t<BdOfWkW!MFaT-;|uhKPjm6B{Xmf|A9Yk;(z3iCVl<)EYd=J=Pr7h2HyHDdik|-
z82?qx{0#g5Uj27EodrGq&moQaZ*?D}EW&iB0K5Am<+YJ(DHd#*7V3w|Vs|sfab4H>
z`hjm#^Ri*z`dj}NrHy~OBFg9?B?)`AyMU+g@6Yz)|H*99<Nq9T^ctG)`Hpq3Y~6hF
z)~@&R3UUnpuT={;x&Kf7R{S6MGr!0GIpizzfBQgy<wrZM3&a2dF>*<MMqpirEzV54
r@51JXrXA&i_Ib+T@<Dkv(iaDM>7|!mzF7Vj00960+|G&505kvqC?|cm

diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/Chart.yaml
deleted file mode 100644
index c670ca4b5..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/Chart.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-annotations:
-  catalog.cattle.io/certified: rancher
-  catalog.cattle.io/hidden: "true"
-  catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0'
-  catalog.cattle.io/namespace: cattle-system
-  catalog.cattle.io/os: linux
-  catalog.cattle.io/permits-os: linux,windows
-  catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
-  catalog.cattle.io/release-name: rancher-webhook
-apiVersion: v2
-appVersion: 0.3.2-rc19
-dependencies:
-- condition: capi.enabled
-  name: capi
-  repository: ""
-description: ValidatingAdmissionWebhook for Rancher types
-name: rancher-webhook
-version: 2.0.2+up0.3.2-rc19
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/Chart.yaml
deleted file mode 100644
index 388210bef..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/Chart.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v2
-appVersion: 0.0.0
-name: capi
-version: 0.0.0
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/templates/service.yaml
deleted file mode 100644
index 08df65d62..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/templates/service.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-kind: Service
-apiVersion: v1
-metadata:
-  name: webhook-service
-  annotations:
-    need-a-cert.cattle.io/secret-name: rancher-webhook-tls
-spec:
-  ports:
-  - name: https
-    port: 443
-    targetPort: 8777
-  selector:
-    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/_helpers.tpl b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/_helpers.tpl
deleted file mode 100644
index c37a65c6f..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/_helpers.tpl
+++ /dev/null
@@ -1,22 +0,0 @@
-{{- define "system_default_registry" -}}
-{{- if .Values.global.cattle.systemDefaultRegistry -}}
-{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
-{{- else -}}
-{{- "" -}}
-{{- end -}}
-{{- end -}}
-
-{{- define "rancher-webhook.labels" -}}
-app: rancher-webhook
-{{- end }}
-
-{{- define "linux-node-tolerations" -}}
-- key: "cattle.io/os"
-  value: "linux"
-  effect: "NoSchedule"
-  operator: "Equal"
-{{- end -}}
-
-{{- define "linux-node-selector" -}}
-kubernetes.io/os: linux
-{{- end -}}
\ No newline at end of file
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/deployment.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/deployment.yaml
deleted file mode 100644
index e4270c1ec..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/deployment.yaml
+++ /dev/null
@@ -1,59 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: rancher-webhook
-spec:
-  selector:
-    matchLabels:
-      app: rancher-webhook
-  template:
-    metadata:
-      labels:
-        app: rancher-webhook
-    spec:
-      {{- if .Values.capi.enabled }}
-      volumes:
-      - name: tls
-        secret:
-          secretName: rancher-webhook-tls
-      {{- end }}
-      {{- if .Values.global.hostNetwork }}
-      hostNetwork: true
-      {{- end }}
-      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
-      {{- if .Values.nodeSelector }}
-{{ toYaml .Values.nodeSelector | indent 8 }}
-      {{- end }}
-      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
-      {{- if .Values.tolerations }}
-{{ toYaml .Values.tolerations | indent 6 }}
-      {{- end }}
-      containers:
-      - env:
-        - name: STAMP
-          value: "{{.Values.stamp}}"
-        - name: ENABLE_CAPI
-          value: "{{.Values.capi.enabled}}"
-        - name: ENABLE_MCM
-          value: "{{.Values.mcm.enabled}}"
-        - name: NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
-        name: rancher-webhook
-        imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
-        ports:
-        - name: https
-          containerPort: 9443
-        - name: capi-https
-          containerPort: 8777
-        {{- if .Values.capi.enabled }}
-        volumeMounts:
-        - name: tls
-          mountPath: /tmp/k8s-webhook-server/serving-certs
-        {{- end }}
-      serviceAccountName: rancher-webhook
-      {{- if .Values.priorityClassName }}
-      priorityClassName: "{{.Values.priorityClassName}}"
-      {{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/rbac.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/rbac.yaml
deleted file mode 100644
index 9afaae6c6..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/rbac.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: rancher-webhook
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cluster-admin
-subjects:
-- kind: ServiceAccount
-  name: rancher-webhook
-  namespace: {{.Release.Namespace}}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/service.yaml
deleted file mode 100644
index 74a8a9e5a..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/service.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-kind: Service
-apiVersion: v1
-metadata:
-  name: rancher-webhook
-  namespace: cattle-system
-spec:
-  ports:
-  - port: 443
-    targetPort: 9443
-    protocol: TCP
-    name: https
-  selector:
-    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/serviceaccount.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/serviceaccount.yaml
deleted file mode 100644
index f9251b418..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/serviceaccount.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/webhook.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/webhook.yaml
deleted file mode 100644
index 53a0687b6..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/webhook.yaml
+++ /dev/null
@@ -1,9 +0,0 @@
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: rancher.cattle.io
----
-apiVersion: admissionregistration.k8s.io/v1
-kind: MutatingWebhookConfiguration
-metadata:
-  name: rancher.cattle.io
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/values.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/values.yaml
deleted file mode 100644
index 6964c4961..000000000
--- a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/values.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-image:
-  repository: rancher/rancher-webhook
-  tag: v0.3.2-rc19
-  imagePullPolicy: IfNotPresent
-
-global:
-  cattle:
-    systemDefaultRegistry: ""
-  hostNetwork: false
-
-capi:
-  enabled: false
-
-mcm:
-  enabled: true
-
-# tolerations for the webhook deployment. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for more info
-tolerations: []
-nodeSelector: {}
-
-## PriorityClassName assigned to deployment.
-priorityClassName: ""
diff --git a/index.yaml b/index.yaml
index 75b2ccbf4..9f1465b2b 100755
--- a/index.yaml
+++ b/index.yaml
@@ -11742,28 +11742,6 @@ entries:
     - assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000.tgz
     version: 2.1.000
   rancher-webhook:
-  - annotations:
-      catalog.cattle.io/certified: rancher
-      catalog.cattle.io/hidden: "true"
-      catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0'
-      catalog.cattle.io/namespace: cattle-system
-      catalog.cattle.io/os: linux
-      catalog.cattle.io/permits-os: linux,windows
-      catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
-      catalog.cattle.io/release-name: rancher-webhook
-    apiVersion: v2
-    appVersion: 0.3.2-rc19
-    created: "2023-02-27T11:51:10.790037-05:00"
-    dependencies:
-    - condition: capi.enabled
-      name: capi
-      repository: ""
-    description: ValidatingAdmissionWebhook for Rancher types
-    digest: 21dccebb3d5ee931111f53ca42f70b4614b0345d17b1fa8d3eeb85f7a95f8773
-    name: rancher-webhook
-    urls:
-    - assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc19.tgz
-    version: 2.0.2+up0.3.2-rc19
   - annotations:
       catalog.cattle.io/certified: rancher
       catalog.cattle.io/hidden: "true"

From 08be58d62f7d57396f90bdb90c7b00986bebec64 Mon Sep 17 00:00:00 2001
From: Jiaqi Luo <6218999+jiaqiluo@users.noreply.github.com>
Date: Thu, 9 Mar 2023 12:10:23 -0700
Subject: [PATCH 3/3] make charts

---
 .../rancher-webhook-2.0.2+up0.3.2-rc21.tgz    | Bin 0 -> 1801 bytes
 .../2.0.2+up0.3.2-rc21/Chart.yaml             |  18 ++++++
 .../2.0.2+up0.3.2-rc21/charts/capi/Chart.yaml |   4 ++
 .../charts/capi/templates/service.yaml        |  13 ++++
 .../2.0.2+up0.3.2-rc21/templates/_helpers.tpl |  22 +++++++
 .../templates/deployment.yaml                 |  59 ++++++++++++++++++
 .../2.0.2+up0.3.2-rc21/templates/rbac.yaml    |  12 ++++
 .../2.0.2+up0.3.2-rc21/templates/service.yaml |  13 ++++
 .../templates/serviceaccount.yaml             |   4 ++
 .../2.0.2+up0.3.2-rc21/templates/webhook.yaml |   9 +++
 .../2.0.2+up0.3.2-rc21/values.yaml            |  22 +++++++
 index.yaml                                    |  22 +++++++
 12 files changed, 198 insertions(+)
 create mode 100644 assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc21.tgz
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc21/Chart.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc21/charts/capi/Chart.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc21/charts/capi/templates/service.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/_helpers.tpl
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/deployment.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/rbac.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/service.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/serviceaccount.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/webhook.yaml
 create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc21/values.yaml

diff --git a/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc21.tgz b/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc21.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..aa5391fb25702e37d0d9b6713341d73737591a54
GIT binary patch
literal 1801
zcmV+k2ln_MiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PI>{Z{xTT&$B+oz>8uZTFH{^*s0JK$mP=FfJ<N`hb@YtSTNMs
zW<!xGNqL+4{M`%vwIs`S_F_1<IL%8OYB(H;{QWpHq#}YYQQ2ScX({FN@McMrab8Ho
zFHR<|>$;QiIQ#3mZu_t2`QC*$9=rb7pN{>>h3k#|@$>@R)48x;5^adOaNj&u`{lk7
zAwoz)43k0!762uNaJg_OF@~eV<dC8=Y|bzYpja!NYD*S|C;}K5mEfRL<vDpmdxc6f
zDFXQTmp_B&coWC9UHB7tj-UPf*x6N(2z5*-29P(}`b8UzI+djkfHRT&xASR?Dq=?4
zmDV4=FcHcxx>LJ^N5gI3nHFCA&eeXW6>=mR?bP||<CQ?ONX$N!MpwQ?;<)<Pbw-YF
zE9!ezh%t%~1!brM%LXb%$V{e1Nz5D+<cVWw0pz2kjTV5ySZZdZdI?}KutL;Su{iJd
ziEtJY!^Gk`jF?V`{Cn;b%%y^d+)pqsF>0&Z_v&l-j_dfpPvV-#@4cXV`6_Ai|BCPg
z^=UVNBmD19-Eo`$FTGLE|K|`Ekp%`V$|x4au#I~FLlyz7YH$b0EX)$lXOc7e62K4h
zdue70H40-{3of4sFZLG0v#|hj`u-m0B;n=(7fhRis{oc#n|m~0q<RiuPPj(PN_j2q
zS@2!e9?_`LobEoB^#P3JsPb(sV>PoxDBc1>jJbS?P#6au5n*Xetb<{;KPiC*b;{nM
zq<ToDpcorH)O3kq!kJjuxMDOlJT!y}V-peD+tG&EXpvM1Ow6TK^CN(N{>u_F#7E>v
zjZ^`wH<tC`1I!eYikX)iPPD!!5dzVgEd+*OWZhjWZfj<r>@D-(#=pTR=ER^LeqJJv
zQEA7-Z=`~w_`md9_@7KJd;Fh8)@vI=oHKzi$U*rz%u)GS6|fwDz1di)BAbKrDc>M+
zSeMaGC!DKpv0}o^VemUW9Q+~!$Te2~47UED2zP#4^*3s*Zika6<T^J%;&?Z*DJ``P
zWs#ztqPGV2!jKKmm~vM=0!?`=+e(9?Z`y$KIZ_kA;9frFe3C`VGEVKKd@#8EPeS-$
z|NGS3&;^U+J~X*&8v)lWb<h8P{MUHrjnTjn{EtSL?fri`nofHBpF`?t2#I4oTzS?r
z6JY?~SMzU0Xh=v5393A!jT;>!O`n#lGT-GRV(9Y640Cw{Kqu+|%4JvdtBscmZ<yF?
z1fX;yl@?*u)1?&NxzbAVB*MzHUA&&*x*AL)RcN+@mo4{QAHv@DtWim)Lj?iWqMfa3
zBLvD~nmsmK@x&UKpgalpQH29PgJ5YwY2a$FXLX~H(JL7F4-)Zijh~_0V#Co!AhgHN
z2D8>(o$PhB9_Mv>T34tXog8qKN|6S3sA`J>#cDhM<r;bX>H2O~TNNeUuh-?++K?#T
zYz8}BZ||?a`|<Yk&Gqbug9hqr_JEzco4bQ%A{rgCa({hy`#8J4xosQytCCTD-2==S
z^6&xY&DNrQM$9s(u<KMcn@Ts&HQ-}9O9kE!1RV}+HtTgYky&SFo29^J6YM-TWC5Ga
z$7;lGvTFEK&s+vO23smn|9-JlM(?hRES;!*pK3wPq%r~gaXcRF^hqb$KGN}OI-OQe
zUqx;uz1_(~ba`55Ie;kD%I9!sqImdxr7Kp`s8*<k>7O(OqNt2+_|kw-rbh9a($r)p
zPj;huC%xI)?8<z$D}3kacAje9z4u=GYn1)*pL!znG<Be3`QLc7lmB^MU;jUg)Z@Qw
z#z|t9QnCMKd#3Yzl_eBaP<X==ZBRW(j^8m6GO>6?aHu55V$&co`<s$Ud|)sOU}vmt
zeLHWnNf<F<>E!9(NKIB5&-*+!sAsQ7d3$l9uwFY4d8yvHFI#^zY_T8z1&g160*>K-
z<d1ghKmGaNd87fG=Ao4L3TQWg)I6FibFnH+va_E7lmU<-YJsK|6~#&#NhJ^9r<**w
zZbntj1hX>{eD6>CP03OGlblN5LIcO}@41sE{(aZ?`}*%$q=op-UGz8&y!Tu5@=Iku
z{>z&A8TS93`tM|N>Gk+OhcxQH<$aK%2-BScZ10a0*G6unn6pKatM4a^?adg=wr%U{
z2fj<p+lGDbZ~beOHvZ|7D5Hmz#O!2u0gvI|o$kc{<I8c6|8vN}YiO?HTD5y+tLBsU
zcD<Jq$RYfnsupl`|DU+6_}_Cc-5&qvkgv@D>jwfXJKAYoAO;YKp-r+gg4$)+{LHlb
rE^Kya+EFfOpQr3E9~5UJeQ}_dUV7=})$;!U00960Lt*a#05kvq#rBX`

literal 0
HcmV?d00001

diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc21/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/Chart.yaml
new file mode 100644
index 000000000..faf0c0a17
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/Chart.yaml
@@ -0,0 +1,18 @@
+annotations:
+  catalog.cattle.io/certified: rancher
+  catalog.cattle.io/hidden: "true"
+  catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0'
+  catalog.cattle.io/namespace: cattle-system
+  catalog.cattle.io/os: linux
+  catalog.cattle.io/permits-os: linux,windows
+  catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
+  catalog.cattle.io/release-name: rancher-webhook
+apiVersion: v2
+appVersion: 0.3.2-rc21
+dependencies:
+- condition: capi.enabled
+  name: capi
+  repository: ""
+description: ValidatingAdmissionWebhook for Rancher types
+name: rancher-webhook
+version: 2.0.2+up0.3.2-rc21
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc21/charts/capi/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/charts/capi/Chart.yaml
new file mode 100644
index 000000000..388210bef
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/charts/capi/Chart.yaml
@@ -0,0 +1,4 @@
+apiVersion: v2
+appVersion: 0.0.0
+name: capi
+version: 0.0.0
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc21/charts/capi/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/charts/capi/templates/service.yaml
new file mode 100644
index 000000000..08df65d62
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/charts/capi/templates/service.yaml
@@ -0,0 +1,13 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: webhook-service
+  annotations:
+    need-a-cert.cattle.io/secret-name: rancher-webhook-tls
+spec:
+  ports:
+  - name: https
+    port: 443
+    targetPort: 8777
+  selector:
+    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/_helpers.tpl b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/_helpers.tpl
new file mode 100644
index 000000000..c37a65c6f
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/_helpers.tpl
@@ -0,0 +1,22 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{- define "rancher-webhook.labels" -}}
+app: rancher-webhook
+{{- end }}
+
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+  value: "linux"
+  effect: "NoSchedule"
+  operator: "Equal"
+{{- end -}}
+
+{{- define "linux-node-selector" -}}
+kubernetes.io/os: linux
+{{- end -}}
\ No newline at end of file
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/deployment.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/deployment.yaml
new file mode 100644
index 000000000..e4270c1ec
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/deployment.yaml
@@ -0,0 +1,59 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: rancher-webhook
+spec:
+  selector:
+    matchLabels:
+      app: rancher-webhook
+  template:
+    metadata:
+      labels:
+        app: rancher-webhook
+    spec:
+      {{- if .Values.capi.enabled }}
+      volumes:
+      - name: tls
+        secret:
+          secretName: rancher-webhook-tls
+      {{- end }}
+      {{- if .Values.global.hostNetwork }}
+      hostNetwork: true
+      {{- end }}
+      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+      {{- if .Values.nodeSelector }}
+{{ toYaml .Values.nodeSelector | indent 8 }}
+      {{- end }}
+      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
+      {{- if .Values.tolerations }}
+{{ toYaml .Values.tolerations | indent 6 }}
+      {{- end }}
+      containers:
+      - env:
+        - name: STAMP
+          value: "{{.Values.stamp}}"
+        - name: ENABLE_CAPI
+          value: "{{.Values.capi.enabled}}"
+        - name: ENABLE_MCM
+          value: "{{.Values.mcm.enabled}}"
+        - name: NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+        name: rancher-webhook
+        imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
+        ports:
+        - name: https
+          containerPort: 9443
+        - name: capi-https
+          containerPort: 8777
+        {{- if .Values.capi.enabled }}
+        volumeMounts:
+        - name: tls
+          mountPath: /tmp/k8s-webhook-server/serving-certs
+        {{- end }}
+      serviceAccountName: rancher-webhook
+      {{- if .Values.priorityClassName }}
+      priorityClassName: "{{.Values.priorityClassName}}"
+      {{- end }}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/rbac.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/rbac.yaml
new file mode 100644
index 000000000..9afaae6c6
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/rbac.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rancher-webhook
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: rancher-webhook
+  namespace: {{.Release.Namespace}}
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/service.yaml
new file mode 100644
index 000000000..74a8a9e5a
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/service.yaml
@@ -0,0 +1,13 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: rancher-webhook
+  namespace: cattle-system
+spec:
+  ports:
+  - port: 443
+    targetPort: 9443
+    protocol: TCP
+    name: https
+  selector:
+    app: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/serviceaccount.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/serviceaccount.yaml
new file mode 100644
index 000000000..f9251b418
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: rancher-webhook
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/webhook.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/webhook.yaml
new file mode 100644
index 000000000..53a0687b6
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/templates/webhook.yaml
@@ -0,0 +1,9 @@
+apiVersion: admissionregistration.k8s.io/v1
+kind: ValidatingWebhookConfiguration
+metadata:
+  name: rancher.cattle.io
+---
+apiVersion: admissionregistration.k8s.io/v1
+kind: MutatingWebhookConfiguration
+metadata:
+  name: rancher.cattle.io
diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc21/values.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/values.yaml
new file mode 100644
index 000000000..a4e8648ef
--- /dev/null
+++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc21/values.yaml
@@ -0,0 +1,22 @@
+image:
+  repository: rancher/rancher-webhook
+  tag: v0.3.2-rc21
+  imagePullPolicy: IfNotPresent
+
+global:
+  cattle:
+    systemDefaultRegistry: ""
+  hostNetwork: false
+
+capi:
+  enabled: false
+
+mcm:
+  enabled: true
+
+# tolerations for the webhook deployment. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for more info
+tolerations: []
+nodeSelector: {}
+
+## PriorityClassName assigned to deployment.
+priorityClassName: ""
diff --git a/index.yaml b/index.yaml
index 9f1465b2b..62f485259 100755
--- a/index.yaml
+++ b/index.yaml
@@ -11742,6 +11742,28 @@ entries:
     - assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000.tgz
     version: 2.1.000
   rancher-webhook:
+  - annotations:
+      catalog.cattle.io/certified: rancher
+      catalog.cattle.io/hidden: "true"
+      catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0'
+      catalog.cattle.io/namespace: cattle-system
+      catalog.cattle.io/os: linux
+      catalog.cattle.io/permits-os: linux,windows
+      catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
+      catalog.cattle.io/release-name: rancher-webhook
+    apiVersion: v2
+    appVersion: 0.3.2-rc21
+    created: "2023-03-09T12:10:15.302827-07:00"
+    dependencies:
+    - condition: capi.enabled
+      name: capi
+      repository: ""
+    description: ValidatingAdmissionWebhook for Rancher types
+    digest: 96919b88c395ee486327ca33132ac6ec9ceaf0c268a190da5d541c2a9064aa1e
+    name: rancher-webhook
+    urls:
+    - assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc21.tgz
+    version: 2.0.2+up0.3.2-rc21
   - annotations:
       catalog.cattle.io/certified: rancher
       catalog.cattle.io/hidden: "true"