From 2b75a28aa28382ef1f9eb01899d9934659104058 Mon Sep 17 00:00:00 2001
From: actions <actions@github.com>
Date: Fri, 21 May 2021 00:03:28 +0000
Subject: [PATCH] kube-proxy: v1.21.1-build20210520 (#92)

See rancher/rke2#845

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
---
 ...ke2-kube-proxy-v1.21.1-build2021052004.tgz | Bin 0 -> 4335 bytes
 .../v1.21.1-build2021052004/Chart.yaml        |  12 ++
 .../templates/NOTES.txt                       |   2 +
 .../templates/_helpers.tpl                    |  21 +++
 .../templates/config.yaml                     |  69 +++++++++
 .../templates/daemonset.yaml                  |  78 ++++++++++
 .../templates/rbac.yaml                       |  12 ++
 .../templates/serviceaccount.yaml             |   5 +
 .../v1.21.1-build2021052004/values.yaml       | 142 ++++++++++++++++++
 index.yaml                                    |  16 ++
 10 files changed, 357 insertions(+)
 create mode 100755 assets/rke2-kube-proxy/rke2-kube-proxy-v1.21.1-build2021052004.tgz
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/Chart.yaml
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/NOTES.txt
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/_helpers.tpl
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/config.yaml
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/daemonset.yaml
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/rbac.yaml
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/serviceaccount.yaml
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/values.yaml

diff --git a/assets/rke2-kube-proxy/rke2-kube-proxy-v1.21.1-build2021052004.tgz b/assets/rke2-kube-proxy/rke2-kube-proxy-v1.21.1-build2021052004.tgz
new file mode 100755
index 0000000000000000000000000000000000000000..2722bfa625bd3bdbdc664d009eef4ac9f8202856
GIT binary patch
literal 4335
zcmV<L5D@PliwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PK8wbK5qyc>m_7IFs}@w&!P2l>A7`+3Z}$NxGgkiLRZte{?z-
zh&&QefdB)5vbElP_d5q5DUy=xG|5e8_Zpq4CE&bpa9(&QdV%A?qMYKO(CTJ2JkOZ6
z;fm$rn=jU)D2h&xkKNxWiu!+}<7oWN=r}qVojf@{8l8R<jgCjhqi-Pkaw6<*rLjzZ
z6MZ(X{^b5m8Y}oOs0~*#hUF+=MbY{ijz{4rNYNyk7uI!NNMo50@MAeen2^bY!2(y;
zN~b0c2Cz1zAZJ`!#wBVuf;r<NhJ*~v{Fi1j$xw%h$^!t&a*W~9_rXtWY69QYGta=N
zQYYx>W!4rZ9uDW+X62L!4J)EUhvgXs%ieSb(~^sH9F0fO$vBFRgTHzO{@T{}|0NS8
znlBpw?)LxD(fIVJ@Bhc6=)wQLMjH$ULGT!O&gKX+rJVzNUvqtN0HCo@hFhgqG1M-W
zF`c5swC$V#md$rK8ZmjBAzVy=rKv_^95<UGIAk!Wm#D!i{|S_Y;4$nQwA8m3h3>yS
zheZMCVzN92E-mUAOV9w5DeT2@2jH{?a1cznOwT;;7%F-s*2N60E)f!eOqK=k!m_ET
zNb+K7K$rDbyx}$sD##e>S)E@zza-Vn5!4I{l^WpEO)e3ov8Y3u%&!?rNR*uMd8siy
z1gqI>#uG3o-7Fbgp<eQ&K_hj|w8}x1*6<X;X53Vag2!;pg@7qS&dmD~HA^vdQg-M%
zd?yldkbpN9wPb<_{G?d=j0q+a&#NYwa*c__lu&3E8cl(T<;#v_TpEik4XQ3uLJXrQ
zJRXy3hojS4Jq5E_O{$(hqkIB0E-(yypI7HU)HSG?ZE324q-hWVR`AMJNEJBKXfjMg
zcvTupvd=X#63}K$LR1sKTFGRBnyWO1(McYefCi-1ELo6^KZaNAhUaAtvdpKbX&qmm
zy(J+e&0I;RKL-y5YB-<#42jYR`w<NYWJ`4N37&Hc%nW#CL32r94Yxtg<v|z#<m_gG
z`dn#@;b{Ei^gAyGmpw5WOh9QhN57ClsDxQO1dVg1Q$Zfp1|H<>W>BCWcp=G;wvRpC
zEx#9&%NRySqv*-l2}oM8JV#Yp=WB1zCmk(ShJXIko2wV^em%Q*3&t{w6djV{tw%f;
z%HXez+ZaY!M5{rRFH(UW(rCyNIj!#oo3`4$upJIB)~GRzk3Ey%F}zabMG8ve{-kIz
zu|T>Mwc7-~^C#*faBr7qKq^!-Sm5fZ%aTwqt_|6l1z#gg5oXA2sS)PPqN!q0k+C7(
z6sUQQ(lSv4nK-CE{Xo#`aMB8r*W6}MC~cc?nIRK4gCxUbu_bD537YXJ8lRlr6FPs3
z<KMRcc0y<fS7-tA!mgb1xS>E92419pKHCytJxQ8ahN5UPOqDUH&rkbe22#m^qkZV(
zkXs^(cgAWi=fDi`6s6@ep7@wh1t3}#7a0;;G69(~ma4}vs6V|~qSoB6WF6hT(_hS>
zG(_AbB3ig6`a1~^;fm~?l+g*QOTH~u8`yUOOGVC>=SqqdNW>J=1LyE{m_8FChL040
z2BzHBlbl`WOfSF`EO8d>z7;H4prvs5zT{3>PHZxsbzr1#m2>(G@>_HWN2A}vj%d%E
zQyx3v$QJV|9yv2uGC^`=O^haDjle!lCQK5yCNk5yp-c<KrS-OEyy6V)1xSv44Cf*2
zotV8t*c;{a|8X`R=X-VhX$SAMU{$={E?7?}rrQ$T!Ek390Wd8ojwqT?ZQ#x5%q=$?
z7%Z4(lsE-9ZpkPq?iskwc#>7xTKc8ssKI2a6sfZptI8yUYgZyrc|nU<7H~27<;u^2
zM8KOwlqsI`R9Booc8Qi>dwCp7lVq5dg4DPw(9h17dpX5nZX6itwg&XGdLe1?oZ}}J
z&Mqe~r3%qn7YB6lu1cy_!N|!>eN0MKO79hvsyz0YF8+kkEdMtRrWT@|;yC3zx5&K&
zcL@Ci7v8fH>*Uv(aGTdQHo#^iw8jMa(rFi7Uc9aX$|uP%<FXcGw-i4=pVUF?&oe30
zW}-n5B!Z)~=gpL2sG8&ctklNV3I96dRADf&pqaYVO36q|q-5O`mI2Ubhe`FUqjRpL
zbyYgqv6{I^i^iID?OtPt9=$?%yDHG@;lC$We_oFFg^A(B;ZLd}njn2m>#Apu&Ptmp
z&Hq{F#hKE%|GaOV*}DwoN=64@Ts1RYL2Gm-*xc!N%^`;2lIfw~)6Ut-kj+urVY5{X
z*BGwG+Nh)rjiv^sXs;0^2sMY9C{2bY5NiICKE8A+mB}iG6B7h=EmRjmRr>pJt*5ie
zMP2{wt181&1Y3bG&$w*O<RI{~{Kz6JM+zS1BX^}#<Q#whkp)%{@S_T>N}NuCH5xy0
z+(({hRipY+$p|V;)XZz5PCvAV<1@eJ)ztlFf^3pRdaY8NC~b|~uKwb2bGD-Jwq$~*
zq_n9}$--1FIts_(Q5X%!$A{JD<KfZxAaoi|amGqf&!;2W{%^k@K#oi{{7D_Y3~xjW
z1F2G^bvdiM;(GOz$_IwFF9VkTQ7w44xTHjrpfO=Hk)3tWU=&5sA<+MS50uKUi11nZ
zM+}4SzyH2{Mu4)Z&1PKCe5ew<#_4($$wr1LPRseQATY?7Oa;Y-1}P2#C!!Awzq-X~
zrA4oi81_no+7)_xu&+dl`T&%My}Gv9gZ-H^>biSr_QIyDoC+ovhgB7gFhyerY{|HA
zsnxUFPfD#(TCr*hrh_$wPI2cET;LGyY@omM%+&QEOiSy~%*t5I_l&2tAeR*+WJ9hx
zmi392OH)#9O@aK-*ZfRevz37v6T-lhHow*RL8B8dkt;!HlNLON%lZI@>VD_X2KJ{o
z=aP(ifHI}Ohd}i<sel|_X=ot+znaYqWj!vbrsqpMAU|*$yvhp_B~6)QO2I|x)Q5)k
z0T!8dwNG#^bTNbdQhLARq_XIcI7Wl$fF>g=A?sro&19-_v4SL11|`jn0NlJ9%P%x8
zxhfkKI<xl<zEUMzGoOzPl{FbpQ<QZyb0WQ=J&A48$+=Xzp~j8#OD^ZLQXGP^8R{mC
zkepPkPMyE1YfQsRDxYu&`)@h>L+QVVe{*#Ieh3sOV%QsnqtiVf7>ZIC%Ak+w+_aE$
zws0p~hIT?Uovc2VPz9-?l-!3#sVpg*dn=WAV?m=pW{@ULF*i*)<vJ$n=^qkd&D?}s
zkv2sakV;)>ZZP%bsm*ZZjIuzTGwGc}W3HBd)%|gp=j3ZAvX3wzegDI$`;}++QtA3C
zr9RgZiV7_0i#{rW)`eJO0}CuHr~+kO1dUIk+|@y2L**vr*X<RjUs_faf+x<$$uOL4
z4#-2EHl7o-3Mg>oNx+Hbw6U$tpjARp`g&h-yS_`QLZWk)Yt5}+qB`Dp5AG`4aqdfN
zO*PB<DAi$~JA}6?4(38lnTTESOcCU{CwYl;ZmeF#@aWP1@e7+T-1_%F7V|<di)Q%x
z&D$4Op}n!6&EvlN-{?5%-T$1NKHUF)o%Z9pUdk91=;)8tm=F})ADrz!yzTb?cNvNT
zwFzzUnODL0`2T2h@}%egrzgk95B~o(+U@Ot@-~+Uk9^8~SEccHx=Ol_VDRBXK!AJ(
zq2Ek}K2e8TvvdPrP)RX^NB_?ZAN@H@6b73wkJb{POt*fnr$FZXE@hUzOS!&FZ~}bJ
zEPKxN7I8PE-3H#3aqB_J#|z$^rMz38S$w+ucO20C`KfJFOaIWV#o*2<|JCOH(0Xlm
z{P(N*C0+vE6aP<+PW$!W>Cws2L;U|5Z7>)Fy*GdqK4}M5836r>;a`IQz#VKipzG*T
zK`y>CAy>oY$X$7l975;O&FyUyKwACqFL+-ni}2xtL)kdc5BzyPOA;(>>s-A{aU&#c
z!uL4=O#LDMU1S`{8Y5|)>)(mj0^H==K4QPU^#@Mr&NL8i5^xs-cd>t882Io3Dvh=t
z=-l2yqL@IFU_TYK;97*&ef@>ncv;gHs5jU`TEDuX)_w-l#rJUG8elzr_b6pMG?!~I
zn-tAcljg)@E7}&wO{LqUXuT`Bm*6IBpXA0%lNPDoSRd7&L{FL{<u+<>tdF|wxkd|n
zb9jTm#=D9(dT+3g+<t)J*T3^BqD85O3_Bp3%hG$ia5sf#yyeW~db2Ii?K|y`(d{ty
z`!H{BT?N#9H}{Y+8#L;-25#xAR{$5!FHH}BX~OpCrmp%kUVhSScVlhLw7J;dps;=%
zupwo2b$>b8f>jS~!Ma1-O^t5Vg-wc=&HZ)9@z>p(#CKrzb+Mh_HfDEm`V=<n1K%}R
z`w+O#W*dB$&4SA`cDJ$aM*!#TBVPxw?aH#nW^=f|o_RkY`dTC35({N@Z@IoE1X&8<
z#yZz|Eo!a)n#}sHWs_|)*5`fKxqq9?9dLb;Wm;UM0=KPBYhijwotK1xU$8-S!3p0k
zaCHdZ`fJkoX+y4!)LCglfDa!W?+UFNu6J|Q*K02Q?Oqd{T<&>(bs58q34>L)M0>6D
z;<fu#$D>EJ$GV?${K5;@=WWWH(koU3Ia*d1qk>IQR1;%G5ku$Qx&N`qMwh$osQUeR
z!@~x&*LLs!Qii#b20#DTVE63*j-x02-+w)cP9M(yzDjFv=vYyh;c`^@;d8hCS7>+o
z;o>_p_#9s}1t#vQ&%G#6+EdM$O|qX_Y<4lKO*O9bO(P^V(V?)520$%DwKr*gu;zOP
z{$Zy~*MtTzER7zzw<^Oam%|=G4>K6}4bao(T(IS2t(|oTr7oQZ^>e1D-|oMD^ZdoT
z*JrO@95kRPmu+#p!W+0|1pL+OORe&_)d?`;DAG%ub$h#;`{k%N=#VDNX0cOQNI93H
zc?0HuE<_2VUYI*hltcLNp<Q$kZn*xP5v87uVaw+0998j~ltN6D;K?e6i`i>sCmIb(
z+dyrx#wzt-Qfh8j?tI|JwslcxzT^Vun8xnaPcyVsqRjD?Dy22;709W_>t@Sxw<zzF
zrbDBn!rqBCDbAnnZjdF&>Ji?0NFz(%NU`e8q${&7<?yE3dI*&)Hb_^4gU(==2F*EF
zRL`3Ybit>C&9SYbrP9>vdG1dhUUF^f$&!P-_LW2ji;VHA6GfmpWbtnWL#~F(kRY<W
z37S<_&Hw~6#@8j@Tn9vLkZ5js!bDIDOL@Z9vYol-N&P*Jr&3w_py>{_TO8ar8yEj{
z=qyP{p<4{33-Efo6<O3dm#zZ;L9+z?cIV1Jy^P@~s^OGCU#Pdj+yY7C)tt}LR7pc?
z)96wagrjr}FK)Q8ra{~>;9aG~fR@ggO54#s&D^a!duxiwo%TPdPN-h7BK{aB+%a&M
z?03127xN_-_(q?*r#d}OTfFK{UfW%4hc>!CR~9L=cx5%SIA3|%S_#4B{AV}RI*t2T
zHqQiO@M*yFxNIXlRMP(uZFl{zr!4t0zXQMb-+vhQ>;Kazdh$^Je~s3z`P_<keo3&t
z(y2G+J||x)fzP;1xtw=)2kSr_yChou&MDAJU{!Fkg8!gZS=_-csE?Og+#2FOM|a7a
za{31**8c+(4)dy$Fdt3`cDCLAU)3DUtMGFo!F~QeI_mlVI2w%}?ti~Z+v+a8jo_w-
dKlsr@duR{sq5ZqJ{|Nv9|Nj+Rjl2L(004bOd)fd1

literal 0
HcmV?d00001

diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/Chart.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/Chart.yaml
new file mode 100755
index 0000000..7cf5654
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/Chart.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+appVersion: v1.21.1
+description: Install Kube Proxy.
+keywords:
+- kube-proxy
+maintainers:
+- email: charts@rancher.com
+  name: Rancher Labs
+name: rke2-kube-proxy
+sources:
+- https://github.com/rancher/rke2-charts
+version: v1.21.1-build2021052004
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/NOTES.txt b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/NOTES.txt
new file mode 100755
index 0000000..2da0e24
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/NOTES.txt
@@ -0,0 +1,2 @@
+Kube-proxy has been installed.
+
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/_helpers.tpl b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/_helpers.tpl
new file mode 100755
index 0000000..cb64d1f
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/_helpers.tpl
@@ -0,0 +1,21 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+{{- define "rke2_data_dir" -}}
+{{- if .Values.global.rke2DataDir -}}
+{{- printf "%s" .Values.global.rke2DataDir -}}
+{{- else -}}
+{{- "/var/lib/rancher/rke2" -}}
+{{- end -}}
+{{- end -}}
+{{- define "kubeproxy_kubeconfig" -}}
+{{- if .Values.global.rke2DataDir -}}
+{{- printf "%s/agent/kubeproxy.kubeconfig" .Values.global.rke2DataDir -}}
+{{- else -}}
+{{- printf "%s" .Values.clientConnection.kubeconfig -}}
+{{- end -}}
+{{- end -}}
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/config.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/config.yaml
new file mode 100755
index 0000000..24fe853
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/config.yaml
@@ -0,0 +1,69 @@
+---
+apiVersion: v1
+data:
+  config.conf: |-
+    apiVersion: kubeproxy.config.k8s.io/v1alpha1
+    bindAddress: {{ .Values.bindAddress | quote }}
+    clientConnection:
+      acceptContentTypes: {{ .Values.clientConnection.acceptContentTypes | quote }}
+      burst: {{ .Values.clientConnection.burst }}
+      contentType: {{ .Values.clientConnection.contentType | quote }}
+      kubeconfig: {{ include "kubeproxy_kubeconfig" . | quote }}
+      qps: {{ .Values.clientConnection.qps }} 
+    clusterCIDR: {{ coalesce .Values.global.clusterCIDR .Values.clusterCIDR | quote }}
+    configSyncPeriod: {{ .Values.configSyncPeriod }}
+    conntrack:
+      maxPerCore: {{ .Values.conntrack.maxPerCore }}
+      min: {{ .Values.conntrack.min }}
+      tcpCloseWaitTimeout: {{ .Values.conntrack.tcpCloseWaitTimeout | quote }}
+      tcpEstablishedTimeout: {{ .Values.conntrack.tcpEstablishedTimeout | quote }}
+    detectLocalMode: {{ .Values.detectLocalMode | quote }}
+    enableProfiling: {{ .Values.enableProfiling | quote }}
+    healthzBindAddress: {{ .Values.healthzBindAddress | quote }}
+    hostnameOverride: {{ .Values.hostnameOverride | quote }}
+    iptables:
+      masqueradeAll: {{ .Values.iptables.masqueradeAll | quote }}
+      masqueradeBit: {{ .Values.iptables.masqueradeBit }}
+      {{ if .Values.iptables.minSyncPeriod }}
+      minSyncPeriod: {{ .Values.iptables.minSyncPeriod }}
+      {{ end }}
+      syncPeriod: {{ .Values.iptables.syncPeriod }}
+    ipvs:
+      excludeCIDRs: {{ .Values.ipvs.excludeCIDRs | quote }}
+      {{ if .Values.ipvs.minSyncPeriod }}
+      minSyncPeriod: {{ .Values.ipvs.minSyncPeriod }}
+      {{ end }}
+      scheduler: {{ .Values.ipvs.scheduler | quote }}
+      strictARP: {{ .Values.ipvs.strictARP | quote }}
+      syncPeriod: {{ .Values.ipvs.syncPeriod }}
+      {{ if .Values.ipvs.tcpFinTimeout }}
+      tcpFinTimeout: {{ .Values.ipvs.tcpFinTimeout }}
+      {{ end }}
+      {{ if .Values.ipvs.tcpTimeout }}
+      tcpTimeout: {{ .Values.ipvs.tcpTimeout }}
+      {{ end }}
+      {{ if .Values.ipvs.udpTimeout }}
+      udpTimeout: {{ .Values.ipvs.udpTimeout }}
+      {{ end }}
+    kind: KubeProxyConfiguration
+    metricsBindAddress: {{ .Values.metricsBindAddress | quote }}
+    mode: {{ .Values.proxy.mode | quote }}
+    nodePortAddresses: null
+    oomScoreAdj: {{ .Values.oomScoreAdj }}
+    portRange: {{ .Values.proxy.portRange | quote }}
+    showHiddenMetricsForVersion: {{ .Values.showHiddenMetricsForVersion | quote }}
+    udpIdleTimeout: {{ .Values.udpTimeout | quote }}
+    featureGates:
+    {{- range  $key, $value := .Values.featureGates }}
+      {{ $key }}: {{ $value }}
+    {{- end }}
+    winkernel:
+      enableDSR: false
+      networkName: ""
+      sourceVip: ""
+kind: ConfigMap
+metadata:
+  labels:
+    app: kube-proxy
+  name: kube-proxy
+  namespace: kube-system
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/daemonset.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/daemonset.yaml
new file mode 100755
index 0000000..1267df8
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/daemonset.yaml
@@ -0,0 +1,78 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    k8s-app: kube-proxy
+  name: kube-proxy
+  namespace: kube-system
+spec:
+  selector:
+    matchLabels:
+      k8s-app: kube-proxy
+  template:
+    metadata:
+      labels:
+        k8s-app: kube-proxy
+    spec:
+      containers:
+      - command:
+        - /usr/local/bin/kube-proxy
+        - --config=/var/lib/kube-proxy/config.conf
+        - --hostname-override=$(NODE_NAME)
+        env:
+        - name: NODE_NAME
+          valueFrom:
+            fieldRef:
+              apiVersion: v1
+              fieldPath: spec.nodeName
+        image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+        imagePullPolicy: IfNotPresent
+        name: kube-proxy
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /var/lib/kube-proxy
+          name: kube-proxy
+        - mountPath: {{ template "rke2_data_dir" . }}/agent
+          name: rke2config
+          readOnly: true
+        - mountPath: /run/xtables.lock
+          name: xtables-lock
+        - mountPath: /lib/modules
+          name: lib-modules
+          readOnly: true
+      dnsPolicy: ClusterFirst
+      hostNetwork: true
+      nodeSelector:
+        kubernetes.io/os: linux
+      priorityClassName: system-node-critical
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      serviceAccount: kube-proxy
+      serviceAccountName: kube-proxy
+      terminationGracePeriodSeconds: 30
+      tolerations:
+      - key: CriticalAddonsOnly
+        operator: Exists
+      - operator: Exists
+      volumes:
+      - hostPath:
+          path: {{ template "rke2_data_dir" . }}/agent
+          type: ""
+        name: rke2config
+      - configMap:
+          name: kube-proxy
+        name: kube-proxy
+      - hostPath:
+          path: /run/xtables.lock
+          type: FileOrCreate
+        name: xtables-lock
+      - hostPath:
+          path: /lib/modules
+          type: ""
+        name: lib-modules
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: 1
+    type: RollingUpdate
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/rbac.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/rbac.yaml
new file mode 100755
index 0000000..d98f84c
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/rbac.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rke2:node-proxier
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: system:node-proxier
+subjects:
+- kind: ServiceAccount
+  name: kube-proxy
+  namespace: kube-system
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/serviceaccount.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/serviceaccount.yaml
new file mode 100755
index 0000000..59408a2
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/templates/serviceaccount.yaml
@@ -0,0 +1,5 @@
+kind: ServiceAccount
+apiVersion: v1
+metadata:
+  name: kube-proxy
+  namespace: kube-system
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/values.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/values.yaml
new file mode 100755
index 0000000..d6d65ee
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021052004/values.yaml
@@ -0,0 +1,142 @@
+---
+
+# image for kubeproxy
+image:
+  repository: rancher/hardened-kube-proxy
+  tag: v1.21.1-build20210520
+
+# The IP address for the proxy server to serve on 
+# (set to '0.0.0.0' for all IPv4 interfaces and '::' for all IPv6 interfaces)
+bindAddress: 0.0.0.0
+
+# If true cleanup iptables and ipvs rules and exit.
+cleanup: 
+
+# The CIDR range of pods in the cluster. 
+# When configured, traffic sent to a Service cluster IP from outside this range 
+# will be masqueraded and traffic sent from pods to an external 
+# LoadBalancer IP will be directed to the respective cluster IP instead
+clusterCIDR: 10.42.0.0/16
+
+# The path to the configuration file.
+config: 
+
+# How often configuration from the apiserver is refreshed. Must be greater than 0.
+configSyncPeriod: 15m0s
+
+conntrack:
+  # Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore conntrack-min).
+  maxPerCore: 32768
+  # Minimum number of conntrack entries to allocate, regardless of conntrack-max-per-core (set conntrack-max-per-core=0 to leave the limit as-is).
+  min: 131072
+  # NAT timeout for TCP connections in the CLOSE_WAIT state
+  tcpTimeoutCloseWait: 1h0m0s
+  # Idle timeout for established TCP connections (0 to leave as-is)
+  tcpTimeoutEstablished: 24h0m0s
+
+# Mode to use to detect local traffic
+detectLocalMode: 
+
+# A set of key=value pairs that describe feature gates for alpha/experimental features:
+featureGates: 
+
+# The IP address with port for the health check server to serve on
+# (set to '0.0.0.0:10256' for all IPv4 interfaces and '[::]:10256' for all IPv6 interfaces). Set empty to disable.
+healthzBindAddress: 0.0.0.0:10256
+
+# help for kube-proxy
+help: 
+
+# If non-empty, will use this string as identification instead of the actual hostname.
+hostnameOverride: 
+
+iptables:
+  # If using the pure iptables proxy, SNAT all traffic sent via Service cluster IPs (this not commonly needed)
+  masqueradeAll: 
+  # If using the pure iptables proxy, the bit of the fwmark space to mark packets requiring SNAT with. Must be within the range [0, 31].
+  masqueradeBit: 14
+  # The minimum interval of how often the iptables rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
+  minSyncPeriod: 
+  # The maximum interval of how often iptables rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0.
+  syncPeriod: 30s
+
+ipvs:
+  # A comma-separated list of CIDR's which the ipvs proxier should not touch when cleaning up IPVS rules.
+  excludeCidrs:
+  # The minimum interval of how often the ipvs rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
+  minSyncPeriod: 
+  # The ipvs scheduler type when proxy mode is ipvs
+  scheduler:
+  # Enable strict ARP by setting arp_ignore to 1 and arp_announce to 2
+  strictArp: 
+  # The maximum interval of how often ipvs rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0.
+  syncPeriod: 30s
+  # The timeout for idle IPVS TCP connections, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').
+  tcpTimeout: 
+  # The timeout for IPVS TCP connections after receiving a FIN packet, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').
+  tcpfinTimeout:
+  # The timeout for IPVS UDP packets, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').
+  udpTimeout:
+
+
+clientConnection:        
+  # Burst to use while talking with kubernetes apiserver
+  apiBurst: 10
+  # Content type of requests sent to apiserver.
+  apiContentType:
+  # QPS to use while talking with kubernetes apiserver
+  qps: 5
+  # Path to kubeconfig file with authorization information (the master location is set by the master flag).
+  kubeconfig: /var/lib/rancher/rke2/agent/kubeproxy.kubeconfig
+
+# Maximum number of seconds between log flushes
+logFlushFrequency: 5s
+
+
+
+# The address of the Kubernetes API server (overrides any value in kubeconfig)
+master: 
+
+# The IP address with port for the metrics server to serve on 
+# (set to '0.0.0.0:10249' for all IPv4 interfaces and '[::]:10249' for all IPv6 interfaces). Set empty to disable.
+metricsBindAddress: 127.0.0.1:10249
+
+# A string slice of values which specify the addresses to use for NodePorts. 
+# Values may be valid IP blocks (e.g. 1.2.3.0/24, 1.2.3.4/32). The default empty string slice ([]) means to use all local addresses.
+nodeportAddresses:
+
+# The oom-score-adj value for kube-proxy process. Values must be within the range [-1000, 1000]
+oomScoreAdj: -999
+
+# If true enables profiling via web interface on /debug/pprof handler.
+profiling:
+
+proxy:
+  # Which proxy mode to use: 'userspace' (older) or 'iptables' (faster) or 'ipvs'. 
+  # If blank, use the best-available proxy (currently iptables). 
+  # If the iptables proxy is selected, regardless of how, but the system's 
+  # kernel or iptables versions are insufficient, this always falls back to the userspace proxy.
+  mode:
+# Range of host ports (beginPort-endPort, single port or beginPort+offset, inclusive) 
+# that may be consumed in order to proxy service traffic. 
+# If (unspecified, 0, or 0-0) then ports will be randomly chosen.
+  portRange:
+
+# The previous version for which you want to show hidden metrics. 
+# Only the previous minor version is meaningful, other values will not be allowed.
+# The format is <major>.<minor>, e.g.: '1.16'. The purpose of this format is make 
+# sure you have the opportunity to notice if the next release hides additional metrics, 
+# rather than being surprised when they are permanently removed in the release after that.
+showHiddenMetricsForVersion:
+
+# How long an idle UDP connection will be kept open (e.g. '250ms', '2s'). 
+# Must be greater than 0. Only applicable for proxy-mode=userspace
+udpTimeout: 250ms
+
+# Print version information and quit
+version: 
+
+# If set, write the default configuration values to this file and exit.
+writeConfigTo:
+global:
+  systemDefaultRegistry: ""
diff --git a/index.yaml b/index.yaml
index b37b873..f3aed81 100755
--- a/index.yaml
+++ b/index.yaml
@@ -651,6 +651,22 @@ entries:
     - assets/rke2-ingress-nginx/rke2-ingress-nginx-1.36.300.tgz
     version: 1.36.300
   rke2-kube-proxy:
+  - apiVersion: v1
+    appVersion: v1.21.1
+    created: "2021-05-21T00:03:28.147234712Z"
+    description: Install Kube Proxy.
+    digest: 20eca221bc734ce0ce72da765c2340a3c9eb88e2c43b1e0913bb6a4285a5c970
+    keywords:
+    - kube-proxy
+    maintainers:
+    - email: charts@rancher.com
+      name: Rancher Labs
+    name: rke2-kube-proxy
+    sources:
+    - https://github.com/rancher/rke2-charts
+    urls:
+    - assets/rke2-kube-proxy/rke2-kube-proxy-v1.21.1-build2021052004.tgz
+    version: v1.21.1-build2021052004
   - apiVersion: v1
     appVersion: v1.21.1
     created: "2021-05-12T21:45:23.280540427Z"