From dfdaa3327c768bc442082f2da9d98392b53f98cf Mon Sep 17 00:00:00 2001
From: actions <actions@github.com>
Date: Wed, 12 May 2021 21:45:23 +0000
Subject: [PATCH] rke2-kube-proxy: v1.21.2-build20210512 (#83)

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
---
 ...ke2-kube-proxy-v1.21.1-build2021051203.tgz | Bin 0 -> 4335 bytes
 .../v1.21.1-build2021051203/Chart.yaml        |  12 ++
 .../templates/NOTES.txt                       |   2 +
 .../templates/_helpers.tpl                    |  21 +++
 .../templates/config.yaml                     |  69 +++++++++
 .../templates/daemonset.yaml                  |  78 ++++++++++
 .../templates/rbac.yaml                       |  12 ++
 .../templates/serviceaccount.yaml             |   5 +
 .../v1.21.1-build2021051203/values.yaml       | 142 ++++++++++++++++++
 index.yaml                                    |  16 ++
 10 files changed, 357 insertions(+)
 create mode 100755 assets/rke2-kube-proxy/rke2-kube-proxy-v1.21.1-build2021051203.tgz
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/Chart.yaml
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/NOTES.txt
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/_helpers.tpl
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/config.yaml
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/daemonset.yaml
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/rbac.yaml
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/serviceaccount.yaml
 create mode 100755 charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/values.yaml

diff --git a/assets/rke2-kube-proxy/rke2-kube-proxy-v1.21.1-build2021051203.tgz b/assets/rke2-kube-proxy/rke2-kube-proxy-v1.21.1-build2021051203.tgz
new file mode 100755
index 0000000000000000000000000000000000000000..6be7c7b1369067438b87761cfafc497ec8de81d9
GIT binary patch
literal 4335
zcmV<L5D@PliwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PK8wbK5qyc>m_7IFs}@w&!P2l>A7`+3Z}$NxGgkiLRZte{?z-
zh&&QefdB)5vbElP_d5q5DUy=xG|5e8_Zpq4CE&bpa9(&QdV%A?qMYKO(CTJ2JkOZ6
z;fm$rn=jU)D2h&xkKNxWiu!+}<7oWN=r}rl5*?q8PRHLwqvO%hlW!pUaw6<*rLjzZ
z6MZ(X{^b5m8Y}oOs0~*#hUF+=MbY{ijz{4rNYNyk7uI!NNMo50@MAeen2^bY!2(y;
zN~b0c2Cz1zAZJ`!#wBVuf;r<NhJ*~v{Fi1j$xw%h$^!t&a*W~9_rXtWY69QYGta=N
zQYYx>W!4rZ9uDW+X62L!4J)EUhvgXs%ieSb(~^sH9F0fO$!HuM1%LGl{I#v`|4SxH
zG+#CV-0lCPqw(oc-~W%J(+B_m8f`Eb1i@qAIh!NQly(m6ea-d70f5Fr8E%zc#ZbFg
z#&n7j)3$R0ST^6`XvE}ghHx<fmZlnwaolW%;E=(fUZMu8{3lQng2%9L&{E%C6uSTR
z92Nzji^=jBxU{HeEI|WIrmz>s9e~poz(FwOGClLWW2oqnSQj&}x<p6>GFcYD3(KaW
zBFT%T0bSN#@rK(ls32pgXLWw@{E}2NM^G~;RBC`rH@QTV#-a{sGQVahAyIP1=cUH<
z5Uggi8Bf5VbhBh|g?h=8294A;(<%p5TEkNWn{iVy3Le8X7XqdTIWzA|)GWo+N!g+6
z@SRA+K?2@b)RGAz@RMTcGbWf!Jg=Hy$~7hyQ$nFxXfy>TmM=S!acL~FG^n~r2{DYK
z@OVtB9ga?G^%TrzHK}_3jPeQ0xWF**eO{gaP}iVlwxy{GlBPifSivh>Aywc^qscH0
z;Z<oY$v)S}NI;u02~kb_Y9*5iYOc~4Mkje>0veE3vt&Uw{uo}d8=jXr$TFXzrgeOM
z_LhW@G;<}L{v13MsNsC_GbBnQ>_;>pkS)>4CwR^+Ff-tl1<fUaHQWX{mj_`0kh7Z!
z>T{(rhNJP5)9<_(T=v9hFaf329Q{HHp%P~C5H!x2P6c^X8+eejn?Zqk;DsbV+CKJl
zxBOmAE@K!SjiM)GCm?CX@*GuZov*z;pLDcT8UFcCZ?0av`}OSNEf~uzQgld)w;u6a
zD1*N;Zeti_5v>MMzDNajNTVT7<g~sUY}#t~!ge^kSfj=;KK4w4$M8y#7bz%>`;(%@
z!~*G3)NT{_&Y!4{z`b3b0jW^UV1cWrE=xkexHe>G7JQ8~MVKM8rAC-Di>8W2MaG7B
zQ=sNKO3OqIWa6Ou^aDY!!$~VhUUQp4p|ownWrj@H43Z3!#g?eKC1}Q@Xnb;dPw4zD
zj(^_**a@K_T%iTb3%hd4<Awrd7<iHX`D{yo^(1Lx8H%FGFjdB&K0ob?8Av4uj`pFC
zLvD#E-WjX8oC7n!Q<Rp^c;aJ16@X|}Tx3XW$pmD|SgIbwp#Jn`iCS~Nl67?VPJc0j
z(hzZ%h-l%O=<g&vge$UlQbs4JF8Q`tZD8LCEEPFho+~L<AQ4kc51hl-Vfsvn7(P+}
z8kllhPjYshGra&)u*6xg`&O`IftJGI`;t3lIkCxj)`5|}RnF-%$Zydh9F2YtJEA>v
zPI>HvBU{X?c;w7r$pp!fH8GlqH3IuInJ`J*n#fG+hB7S_m)6^w@rpCF7a%$IF`S36
zcVhMqVQ-Yv|Hs*QobT1~ryac4f>rT)yI?(`m~KmS2g99d1i-YUIHG7mwShOIGq>Dq
zV6b4CQQ{QbxFw^cxM$!x<4IO&Yw4GkqXv_yQl!patSXZXu3d>h<pnKbS-{2Qmn%O9
z5&>@#QKop#Q(bZX*d<zi?d5SSO_E_+3R2^$KtDTQ?&TDRxp82m+Zxc%>V>4mbB>=_
zIJ=y{lqy7PT^!KGyDF(#1tTXj^)V?`DZN)vs`A)py7&`Dv;5yQm|BQ-isO{?+#>f9
z+#&Q6TzJn)tdn1B!fjsL*Z`Z6&>9ouOQ&6UdGWdmD4!(5jLTY#-BSGgd{PIkKhLC0
zn~4TNkO+>_o;Op9p=yr%vr-#dC;aP-Q-#6Af@bPcD<vZ>k&<;&SO!3!9VXSYj?TG~
z)>Y|b$7<#xEgEaqwR?>ndh`n6?W#bphyR{j{dqaw7bb=ihd-%`XoB=Lt*f3rIxB6a
zH2-Iv7iUW6{`0<dX74hTD;XVtan;Op1+CGUU~{M6HHR36OQwf{PdjHTLpDcghs{<o
zTw}NzYon4jG@2TiqP<3xAk-XYqBI$rK&bgk`uNhRR3@t!PD~KgwNPCMRq5}?wVuu<
z7j^x!uc{1B5o`s%Jma!8lY_v|@*|6^94UC1kKC0~k#qe0M;2H;z>g}hDsegm)@c01
zaUXf2RgLOPB_pUXQ8TZJI{nZdj?es>S5x<!39?BN>9tC6qO>(`yZVdA&Dn~=+mZ>M
zlG3I^B@0uz=qMbAM`1J^A0JkqkB3L&gV1R>#ThF_J)e$f`@j8u068+*@F#WnGQ1Hj
z45Uht*5$13itE)=Djyiyz6@CUN44PH;*t_gg2sf+M0VCegHaSkhd}@TJy0sYBEo0s
zA2AHR|Ni^-83D?sHk)xl^Px)c8mH@3BpVr~I4$SHg1{hSG8GgT8l*S~oQOU!{OT5`
zl@`55V%RGUYFFs(!M+kH>H|<3_UhVZ5B6uysO#>f*$bPpaw?cy99C5{!W4}iuqETd
zrB=^wKPk0FX~n83m=4wyI>ntwaDhX(vw{B3GgH@xFfFY^Gb>{;-!q=pf?QURkPW%&
zSk@<6E=@_bH3jlRU-L6@%~l3xOb7#0+Wc1M2aQg=M6Lv(O<M36F6#prs{5Tk8`z)X
zoJ%t50m_vA9s<?dqylnyrJ;fN|7tcfl=Zlznw~H5fc(I1@G37zlr&|IDFqj$Qy&`E
z2Uuj<)jq+w(8Ub)OX>ZNlggq);usC01DcGigshKUG?S^y#R`&48I&|P0&w$cEWgmW
z<f?2`=*-?b_)3*<&3ryGRMuoXO;Og-%!%}d_9V7VC+AY>h8j1{FS(r0N^uCvW~iGm
zLUK~EI(7c4t}zWOseHmA?7!vg52gPe{>{<-`yo)Eh+%IOj!yS{U?@smD1$zxbJIf3
z*}|P{8QKZabh7$bLKUQnQgR;}rLv@K?yXefjRlPYnL(N~#oRRIl<SzNr+-L<HFFbk
zMcNcyKq_^ixxv(zr#8ctGs*&W&ZKt^jk#L-RrkkXo|CVg$Uee=^!*Q~?pL1OOQq|p
zl=@stC@Qd|FZ!qiS{GuC4J@#*pbC_A5i~xDa#sh94V9aeU$<ABerZ`z2%b0}C&O^I
zIUo;t+IUXTDxkoTCjlp#)5f+ogH{Pa>Fa&T?fNdI3W?5Ht~IxQiRyUYJ-DlE$GI=9
zHPtNZqg01|?hxLpIG77HWg>RPGewZ+p5!IYxv_c`!=p$4$1iNYaO>aySj-E-ESll#
zH*a5Dh4#jNHjn%6f1~55cmH#8`f&gIb=r^XdMRU6prb!lV?t1He{i<{@V49k-(@HY
z)F!mWXI=&0<Nu@4$&;S{pPn3#AN>DowA<SO<!vqz9{H5}u1e$Ybd_`;!QjJ(fB^Xn
zLcf^`eWDJxX6XjLpps$+kN%$-KKgT*C=51V9<3!nnQr}DPl3$&UCJzbmvViV-~{-b
zS@xXkE#huSyA8Z6<JN<cj~Bc-OL@0Gv-ouR?>M0O^HbZVmj0nzi@}{!{;SRXq4nDC
z`0rQqOS}ZSC;p!to%ZX$)1#BoL;U|5Z7>)Fy*GdqK4}M5836r>;a`IQz#VKipzG*T
zK`y>CAy>oY$X$7l975;O&FyUyKwACqFL+-ni}2xtL)kdc5BzyPOA;(>>s-A{aU&#c
z!uL4=O#LDMU1S`{8Y5|)>)(mj0^H==K4QPU^#@Mr&NL8i5^xs-cd>t882Io3Dvh=t
z=-l2yqL@IFU_TYK;97*&ef@>ncv;gHs5jU`TEDuX)_w-l#rJUG8elzr_b6pMG?!~I
zn-tAcljg)@E7}&wO{LqUXuT`Bm*6IBpXA0%lNPDoSRd7&L{FL{<u+<>tdF|wxkd|n
zb9jTm#=D9(dT+3g+<t)J*T3^BqD85O3_Bp3%hG$ia5sf#yyeW~db2Ii?K|y`(d{ty
z`!H{BT?N#9H}{Y+8#L;-25#xAR{$5!FHH}BX~OpCrmp%kUVhSScVlhLw7J;dps;=%
zupwo2b$>b8f>jS~!Ma1-O^t5Vg-wc=&HZ)9@z>p(#CKrzb+Mh_HfDEm`V=<n1K%}R
z`w+O#W*dB$&4SA`cDJ$aM*!#TBVPxw?aH#nW^=f|o_RkY`dTC35({N@Z@IoE1X&8<
z#yZz|Eo!a)n#}sHWs_|)*5`fKxqq9?9dLb;Wm;UM0=KPBYhijwotK1xU$8-S!3p0k
zaCHdZ`fJkoX+y4!)LCglfDa!W?+UFNu6J|Q*K02Q?Oqd{T<&>(bs58q34>L)M0>6D
z;<fu#$D>EJ$GV?${K5;@=WWWH(koU3Ia*d1qk>IQR1;%G5ku$Qx&N`qMwh$osQUeR
z!@~x&*LLs!Qii#b20#DTVE63*j-x02-+w)cP9M(yzDjFv=vYyh;c`^@;d8hCS7>+o
z;o>_p_#9s}1t#vQ&%G#6+EdM$O|qX_Y<4lKO*O9bO(P^V(V?)520$%DwKr*gu;zOP
z{$Zy~*MtTzER7zzw<^Oam%|=G4>K6}4bao(T(IS2t(|oTr7oQZ^>e1D-|oMD^ZdoT
z*JrO@95kRPmu+#p!W+0|1pL+OORe&_)d?`;DAG%ub$h#;`{k%N=#VDNX0cOQNI93H
zc?0HuE<_2VUYI*hltcLNp<Q$kZn*xP5v87uVaw+0998j~ltN6D;K?e6i`i>sCmIb(
z+dyrx#wzt-Qfh8j?tI|JwslcxzT^Vun8xnaPcyVsqRjD?Dy22;709W_>t@Sxw<zzF
zrbDBn!rqBCDbAnnZjdF&>Ji?0NFz(%NU`e8q${&7<?yE3dI*&)Hb_^4gU(==2F*EF
zRL`3Ybit>C&9SYbrP9>vdG1dhUUF^f$&!P-_LW2ji;VHA6GfmpWbtnWL#~F(kRY<W
z37S<_&Hw~6#@8j@Tn9vLkZ5js!bDIDOL@Z9vYol-N&P*Jr&3w_py>{_TO8ar8yEj{
z=qyP{p<4{33-Efo6<O3dm#zZ;L9+z?cIV1Jy^P@~s^OGCU#Pdj+yY7C)tt}LR7pc?
z)96wagrjr}FK)Q8ra{~>;9aG~fR@ggO54#s&D^a!duxiwo%TPdPN-h7BK{aB+%a&M
z?03127xN_-_(q?*r#d}OTfFK{UfW%4hc>!CR~9L=cx5%SIA3|%S_#4B{AV}RI*t2T
zHqQiO@M*yFxNIXlRMP(uZFl{zr!4t0zXQMb-+vhQ>;KazI(ex7zea1<d~U@%za&^+
z>C~HZpOY_@z-L^hT+TbYgLNQ|T@tN+=M-oquqrrN!GF-IEbd?z)W=ILZVhptqr2oy
zIsF3@>;C}?hk4aWm=7leJKJvmuWAnFRrooP;6DE!9rgTw9F0Z~_rG7IZFQI4MsU-^
dAN=T{J+z1R(Ei=q{{#R4|NnzoE3N=e005<?fDZrw

literal 0
HcmV?d00001

diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/Chart.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/Chart.yaml
new file mode 100755
index 0000000..2c8cc70
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/Chart.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+appVersion: v1.21.1
+description: Install Kube Proxy.
+keywords:
+- kube-proxy
+maintainers:
+- email: charts@rancher.com
+  name: Rancher Labs
+name: rke2-kube-proxy
+sources:
+- https://github.com/rancher/rke2-charts
+version: v1.21.1-build2021051203
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/NOTES.txt b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/NOTES.txt
new file mode 100755
index 0000000..2da0e24
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/NOTES.txt
@@ -0,0 +1,2 @@
+Kube-proxy has been installed.
+
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/_helpers.tpl b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/_helpers.tpl
new file mode 100755
index 0000000..cb64d1f
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/_helpers.tpl
@@ -0,0 +1,21 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+{{- define "rke2_data_dir" -}}
+{{- if .Values.global.rke2DataDir -}}
+{{- printf "%s" .Values.global.rke2DataDir -}}
+{{- else -}}
+{{- "/var/lib/rancher/rke2" -}}
+{{- end -}}
+{{- end -}}
+{{- define "kubeproxy_kubeconfig" -}}
+{{- if .Values.global.rke2DataDir -}}
+{{- printf "%s/agent/kubeproxy.kubeconfig" .Values.global.rke2DataDir -}}
+{{- else -}}
+{{- printf "%s" .Values.clientConnection.kubeconfig -}}
+{{- end -}}
+{{- end -}}
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/config.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/config.yaml
new file mode 100755
index 0000000..24fe853
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/config.yaml
@@ -0,0 +1,69 @@
+---
+apiVersion: v1
+data:
+  config.conf: |-
+    apiVersion: kubeproxy.config.k8s.io/v1alpha1
+    bindAddress: {{ .Values.bindAddress | quote }}
+    clientConnection:
+      acceptContentTypes: {{ .Values.clientConnection.acceptContentTypes | quote }}
+      burst: {{ .Values.clientConnection.burst }}
+      contentType: {{ .Values.clientConnection.contentType | quote }}
+      kubeconfig: {{ include "kubeproxy_kubeconfig" . | quote }}
+      qps: {{ .Values.clientConnection.qps }} 
+    clusterCIDR: {{ coalesce .Values.global.clusterCIDR .Values.clusterCIDR | quote }}
+    configSyncPeriod: {{ .Values.configSyncPeriod }}
+    conntrack:
+      maxPerCore: {{ .Values.conntrack.maxPerCore }}
+      min: {{ .Values.conntrack.min }}
+      tcpCloseWaitTimeout: {{ .Values.conntrack.tcpCloseWaitTimeout | quote }}
+      tcpEstablishedTimeout: {{ .Values.conntrack.tcpEstablishedTimeout | quote }}
+    detectLocalMode: {{ .Values.detectLocalMode | quote }}
+    enableProfiling: {{ .Values.enableProfiling | quote }}
+    healthzBindAddress: {{ .Values.healthzBindAddress | quote }}
+    hostnameOverride: {{ .Values.hostnameOverride | quote }}
+    iptables:
+      masqueradeAll: {{ .Values.iptables.masqueradeAll | quote }}
+      masqueradeBit: {{ .Values.iptables.masqueradeBit }}
+      {{ if .Values.iptables.minSyncPeriod }}
+      minSyncPeriod: {{ .Values.iptables.minSyncPeriod }}
+      {{ end }}
+      syncPeriod: {{ .Values.iptables.syncPeriod }}
+    ipvs:
+      excludeCIDRs: {{ .Values.ipvs.excludeCIDRs | quote }}
+      {{ if .Values.ipvs.minSyncPeriod }}
+      minSyncPeriod: {{ .Values.ipvs.minSyncPeriod }}
+      {{ end }}
+      scheduler: {{ .Values.ipvs.scheduler | quote }}
+      strictARP: {{ .Values.ipvs.strictARP | quote }}
+      syncPeriod: {{ .Values.ipvs.syncPeriod }}
+      {{ if .Values.ipvs.tcpFinTimeout }}
+      tcpFinTimeout: {{ .Values.ipvs.tcpFinTimeout }}
+      {{ end }}
+      {{ if .Values.ipvs.tcpTimeout }}
+      tcpTimeout: {{ .Values.ipvs.tcpTimeout }}
+      {{ end }}
+      {{ if .Values.ipvs.udpTimeout }}
+      udpTimeout: {{ .Values.ipvs.udpTimeout }}
+      {{ end }}
+    kind: KubeProxyConfiguration
+    metricsBindAddress: {{ .Values.metricsBindAddress | quote }}
+    mode: {{ .Values.proxy.mode | quote }}
+    nodePortAddresses: null
+    oomScoreAdj: {{ .Values.oomScoreAdj }}
+    portRange: {{ .Values.proxy.portRange | quote }}
+    showHiddenMetricsForVersion: {{ .Values.showHiddenMetricsForVersion | quote }}
+    udpIdleTimeout: {{ .Values.udpTimeout | quote }}
+    featureGates:
+    {{- range  $key, $value := .Values.featureGates }}
+      {{ $key }}: {{ $value }}
+    {{- end }}
+    winkernel:
+      enableDSR: false
+      networkName: ""
+      sourceVip: ""
+kind: ConfigMap
+metadata:
+  labels:
+    app: kube-proxy
+  name: kube-proxy
+  namespace: kube-system
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/daemonset.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/daemonset.yaml
new file mode 100755
index 0000000..1267df8
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/daemonset.yaml
@@ -0,0 +1,78 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    k8s-app: kube-proxy
+  name: kube-proxy
+  namespace: kube-system
+spec:
+  selector:
+    matchLabels:
+      k8s-app: kube-proxy
+  template:
+    metadata:
+      labels:
+        k8s-app: kube-proxy
+    spec:
+      containers:
+      - command:
+        - /usr/local/bin/kube-proxy
+        - --config=/var/lib/kube-proxy/config.conf
+        - --hostname-override=$(NODE_NAME)
+        env:
+        - name: NODE_NAME
+          valueFrom:
+            fieldRef:
+              apiVersion: v1
+              fieldPath: spec.nodeName
+        image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+        imagePullPolicy: IfNotPresent
+        name: kube-proxy
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /var/lib/kube-proxy
+          name: kube-proxy
+        - mountPath: {{ template "rke2_data_dir" . }}/agent
+          name: rke2config
+          readOnly: true
+        - mountPath: /run/xtables.lock
+          name: xtables-lock
+        - mountPath: /lib/modules
+          name: lib-modules
+          readOnly: true
+      dnsPolicy: ClusterFirst
+      hostNetwork: true
+      nodeSelector:
+        kubernetes.io/os: linux
+      priorityClassName: system-node-critical
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      serviceAccount: kube-proxy
+      serviceAccountName: kube-proxy
+      terminationGracePeriodSeconds: 30
+      tolerations:
+      - key: CriticalAddonsOnly
+        operator: Exists
+      - operator: Exists
+      volumes:
+      - hostPath:
+          path: {{ template "rke2_data_dir" . }}/agent
+          type: ""
+        name: rke2config
+      - configMap:
+          name: kube-proxy
+        name: kube-proxy
+      - hostPath:
+          path: /run/xtables.lock
+          type: FileOrCreate
+        name: xtables-lock
+      - hostPath:
+          path: /lib/modules
+          type: ""
+        name: lib-modules
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: 1
+    type: RollingUpdate
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/rbac.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/rbac.yaml
new file mode 100755
index 0000000..d98f84c
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/rbac.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rke2:node-proxier
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: system:node-proxier
+subjects:
+- kind: ServiceAccount
+  name: kube-proxy
+  namespace: kube-system
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/serviceaccount.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/serviceaccount.yaml
new file mode 100755
index 0000000..59408a2
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/templates/serviceaccount.yaml
@@ -0,0 +1,5 @@
+kind: ServiceAccount
+apiVersion: v1
+metadata:
+  name: kube-proxy
+  namespace: kube-system
diff --git a/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/values.yaml b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/values.yaml
new file mode 100755
index 0000000..a91fc5c
--- /dev/null
+++ b/charts/rke2-kube-proxy/rke2-kube-proxy/v1.21.1-build2021051203/values.yaml
@@ -0,0 +1,142 @@
+---
+
+# image for kubeproxy
+image:
+  repository: rancher/hardened-kube-proxy
+  tag: v1.21.1-build20210512
+
+# The IP address for the proxy server to serve on 
+# (set to '0.0.0.0' for all IPv4 interfaces and '::' for all IPv6 interfaces)
+bindAddress: 0.0.0.0
+
+# If true cleanup iptables and ipvs rules and exit.
+cleanup: 
+
+# The CIDR range of pods in the cluster. 
+# When configured, traffic sent to a Service cluster IP from outside this range 
+# will be masqueraded and traffic sent from pods to an external 
+# LoadBalancer IP will be directed to the respective cluster IP instead
+clusterCIDR: 10.42.0.0/16
+
+# The path to the configuration file.
+config: 
+
+# How often configuration from the apiserver is refreshed. Must be greater than 0.
+configSyncPeriod: 15m0s
+
+conntrack:
+  # Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore conntrack-min).
+  maxPerCore: 32768
+  # Minimum number of conntrack entries to allocate, regardless of conntrack-max-per-core (set conntrack-max-per-core=0 to leave the limit as-is).
+  min: 131072
+  # NAT timeout for TCP connections in the CLOSE_WAIT state
+  tcpTimeoutCloseWait: 1h0m0s
+  # Idle timeout for established TCP connections (0 to leave as-is)
+  tcpTimeoutEstablished: 24h0m0s
+
+# Mode to use to detect local traffic
+detectLocalMode: 
+
+# A set of key=value pairs that describe feature gates for alpha/experimental features:
+featureGates: 
+
+# The IP address with port for the health check server to serve on
+# (set to '0.0.0.0:10256' for all IPv4 interfaces and '[::]:10256' for all IPv6 interfaces). Set empty to disable.
+healthzBindAddress: 0.0.0.0:10256
+
+# help for kube-proxy
+help: 
+
+# If non-empty, will use this string as identification instead of the actual hostname.
+hostnameOverride: 
+
+iptables:
+  # If using the pure iptables proxy, SNAT all traffic sent via Service cluster IPs (this not commonly needed)
+  masqueradeAll: 
+  # If using the pure iptables proxy, the bit of the fwmark space to mark packets requiring SNAT with. Must be within the range [0, 31].
+  masqueradeBit: 14
+  # The minimum interval of how often the iptables rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
+  minSyncPeriod: 
+  # The maximum interval of how often iptables rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0.
+  syncPeriod: 30s
+
+ipvs:
+  # A comma-separated list of CIDR's which the ipvs proxier should not touch when cleaning up IPVS rules.
+  excludeCidrs:
+  # The minimum interval of how often the ipvs rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
+  minSyncPeriod: 
+  # The ipvs scheduler type when proxy mode is ipvs
+  scheduler:
+  # Enable strict ARP by setting arp_ignore to 1 and arp_announce to 2
+  strictArp: 
+  # The maximum interval of how often ipvs rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0.
+  syncPeriod: 30s
+  # The timeout for idle IPVS TCP connections, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').
+  tcpTimeout: 
+  # The timeout for IPVS TCP connections after receiving a FIN packet, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').
+  tcpfinTimeout:
+  # The timeout for IPVS UDP packets, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').
+  udpTimeout:
+
+
+clientConnection:        
+  # Burst to use while talking with kubernetes apiserver
+  apiBurst: 10
+  # Content type of requests sent to apiserver.
+  apiContentType:
+  # QPS to use while talking with kubernetes apiserver
+  qps: 5
+  # Path to kubeconfig file with authorization information (the master location is set by the master flag).
+  kubeconfig: /var/lib/rancher/rke2/agent/kubeproxy.kubeconfig
+
+# Maximum number of seconds between log flushes
+logFlushFrequency: 5s
+
+
+
+# The address of the Kubernetes API server (overrides any value in kubeconfig)
+master: 
+
+# The IP address with port for the metrics server to serve on 
+# (set to '0.0.0.0:10249' for all IPv4 interfaces and '[::]:10249' for all IPv6 interfaces). Set empty to disable.
+metricsBindAddress: 127.0.0.1:10249
+
+# A string slice of values which specify the addresses to use for NodePorts. 
+# Values may be valid IP blocks (e.g. 1.2.3.0/24, 1.2.3.4/32). The default empty string slice ([]) means to use all local addresses.
+nodeportAddresses:
+
+# The oom-score-adj value for kube-proxy process. Values must be within the range [-1000, 1000]
+oomScoreAdj: -999
+
+# If true enables profiling via web interface on /debug/pprof handler.
+profiling:
+
+proxy:
+  # Which proxy mode to use: 'userspace' (older) or 'iptables' (faster) or 'ipvs'. 
+  # If blank, use the best-available proxy (currently iptables). 
+  # If the iptables proxy is selected, regardless of how, but the system's 
+  # kernel or iptables versions are insufficient, this always falls back to the userspace proxy.
+  mode:
+# Range of host ports (beginPort-endPort, single port or beginPort+offset, inclusive) 
+# that may be consumed in order to proxy service traffic. 
+# If (unspecified, 0, or 0-0) then ports will be randomly chosen.
+  portRange:
+
+# The previous version for which you want to show hidden metrics. 
+# Only the previous minor version is meaningful, other values will not be allowed.
+# The format is <major>.<minor>, e.g.: '1.16'. The purpose of this format is make 
+# sure you have the opportunity to notice if the next release hides additional metrics, 
+# rather than being surprised when they are permanently removed in the release after that.
+showHiddenMetricsForVersion:
+
+# How long an idle UDP connection will be kept open (e.g. '250ms', '2s'). 
+# Must be greater than 0. Only applicable for proxy-mode=userspace
+udpTimeout: 250ms
+
+# Print version information and quit
+version: 
+
+# If set, write the default configuration values to this file and exit.
+writeConfigTo:
+global:
+  systemDefaultRegistry: ""
diff --git a/index.yaml b/index.yaml
index bf3cbbb..d3975dd 100755
--- a/index.yaml
+++ b/index.yaml
@@ -569,6 +569,22 @@ entries:
     - assets/rke2-ingress-nginx/rke2-ingress-nginx-1.36.300.tgz
     version: 1.36.300
   rke2-kube-proxy:
+  - apiVersion: v1
+    appVersion: v1.21.1
+    created: "2021-05-12T21:45:23.280540427Z"
+    description: Install Kube Proxy.
+    digest: 4bad22c30431ca29dc8fbf5877b3fd821d8c779674422cec67f21969bdffb96a
+    keywords:
+    - kube-proxy
+    maintainers:
+    - email: charts@rancher.com
+      name: Rancher Labs
+    name: rke2-kube-proxy
+    sources:
+    - https://github.com/rancher/rke2-charts
+    urls:
+    - assets/rke2-kube-proxy/rke2-kube-proxy-v1.21.1-build2021051203.tgz
+    version: v1.21.1-build2021051203
   - apiVersion: v1
     appVersion: v1.21.0
     created: "2021-04-27T22:59:40.886210593Z"